Verify a signed contract

Public; no API key needed. Checks a signed contract's digital seal. valid is true when the contract is signed, sealed, and the seal's certificate serial matches the platform's current certificate. The stored PDF is not re-hashed, so documentIntact is always true for a sealed contract. Unsigned or unsealed contracts return 200 with valid: false and an error string. The response includes signer names and emails.