security: uid from wire

[LavaLite-Compute]

security: uid from wire not trusted in job operations (priority, signal, move)
use hdr.uid from authenticated HMAC header instead of wire payload uid

[LavaLite-Compute]

only trusted daemons/clients can generate authenticated requests the payload
is not trustworthy by itself