HBF M0 — Ed25519 device verify

Runs the production verify logic against the bundled stub public key (kid hbf-lic-2026-01) and its committed token. No money, no live key. Expected outcome: import OK, genuine VALID, tampered INVALID → overall PASS.

Running…
1. importKey (JWK alg: "Ed25519")
2. Genuine token → expect VALID
3. Tampered token → expect INVALID
Browser / engine