GET /api/assess/key — the verification half of the signed assessment. AssessTool's copy tells readers to fetch the public key from here and check the signature themselves; until now the path…

GET /api/assess/key — the verification half of the signed assessment. AssessTool's copy tells readers to fetch the public key from here and check the signature themselves; until now the path didn't exist. Returns the Ed25519 public key derived from the same secret the signer uses — or an honest 404 when no key is provisioned, never a made-up key.