Changes to `POST /user/season-claim/voucher` — issues a short-lived, server-signed voucher attesting the caller's testnet root address. Root-only: a signed bearer proof of the wallet's identity is only meaningful for the wallet that owns it.