Verify lineage

Paste a child's birth certificate. We check the ed25519 signature, the validity window, and the issuer binding — entirely offline. The lineage is recomputable, not taken on trust.