Presumably the OP is proposing something like a TPM attached to the image sensor that signs the sensor output or something like that. You can’t sign it because you can’t get the key out. The key could be per-camera and be a published list.

I suppose a dedicated fraudster could still stage an appropriate scene. An appropriately lit matte image might even suffice.