Race condition with setSignatureAlgorithm

[tresf]

As identified in #1319, there's a potential race condition for environments such as ReactJS which may call qz.security.setSignatureAlgorithm() more than once.

qz-tray.js:768 Uncaught TypeError: Cannot read properties of undefined (reading '0')

The workaround discovered in #1319 was to ensure that the security functions were only called once. A permanent solution would be to ensure that the semver logic is hardened against race conditions.

Related: #1319, #538, #524, #1301

[tresf]

I forgot this was already patched. #1301