Signed Backdoor Hiding in Plain Sight on Framework Devices