Runs the production verify logic against the bundled stub public key (kid hbf-lic-2026-01) and its committed token. No money, no live key. Expected outcome: import OK, genuine VALID, tampered INVALID → overall PASS.
hbf-lic-2026-01