Verify a document signature

Anyone — no account — can confirm a signature against a payload hash + public key. Upload the original file (we hash it) or paste a hash, add the signature, and we call /api/verify on Digital Identity. A "proof of signature" QR lands here pre-filled.