SigningValidation runs after the VMR build and has access to all the shipping and non-shipping packages. It should be possible to use the live built SigningValidation task instead of the LKG version that's used today.

Additionally, some of the current indirection might be avoidable.