Verifier Keys

Verifier key-freshness / rotation / revocation manifest. A holder of any signed proof can confirm the active key, its history (so a rotation doesn't silently invalidate older proofs), and revocation state — the freshness check our trust root needs. /governance/pubkey mirrors the cross-impl convention; both return the same manifest.