Audit Verify

Lightweight HMAC chain integrity probe for the web GUI banner.

Walks .sdd/audit/*.jsonl events and returns a fully-populated payload (no nulls in core scalar fields) so the GUI's ChainStatusBanner has something to render even when the audit directory hasn't been initialised yet. Full Sigstore / Merkle reconciliation lives in the lineage-v1 verifier CLI.