Add guidance and requiriements for when Signatures fail verification:

Suggest:

1. Attachments transaction: 400 statusCode and error response with a FHIR OperationOutcome message saying the signature was invalid.
2. Direct query and task the data recipient ( Payer ) would need to notify the data providers that the signature is bad or absent out of band