pkg: refactor out a pkg_read_fd()

We already have to do this for reading the pubkey, just pull it out for
other uses. The ECC signer will use this to verify the bootstrap if
the PUBKEY mechanism is used.

Reviewed by: bapt, emaste
Differential Revision: https://reviews.freebsd.org/D48107