add a script to enforce that all e2e tests have one and only one sig owner defined according to specific policies