VerifiableCredential.verify doesnt validate the signer of the vc against the real issuer

[Johnnyevans32]

here is a scenerio where alice fake signs a vc with bob as the issuer, and the parsed jwt doesnt signify anywhere in its returned payload that alice signed the vc

```
const bob = await DidKeyMethod.create();
const alice = await DidKeyMethod.create();
const authAuthorizationVc = await 
VerifiableCredential.create({
  type: "AuthAuthorization",
  issuer: bob.did,
  subject: bob.did,
  data: { data: "ok" },
  expirationDate: moment()
    .add(1, "minutes")
    .toISOString()
    .replace(/\.\d+Z$/, "Z"),
});

const signedVcJwt = await 
authAuthorizationVc.sign({
  did: alice,
});


console.log({ signedVcJwt, bob, alice });
const verified = await VerifiableCredential.verify({ vcJwt: signedVcJwt });
console.log({ verified });

[nitro-neal]

Looking at this

[jiyoonie9]

@nitro-neal as part of working on this issue, would we be able to verify that web5-kt works the same way?

[nitro-neal]

Yup I have test vectors that test for that:
decentralized-identity/web5-spec#121

[nitro-neal]

Merged here - #421

Thank you for the support!