Finalize the public certificate verifier contract

[jasisz]

Summary

• finalize certificate package and schema version 1 with Plans.lean as the sole authoritative plan data
• keep artifact bytes, Lean wall, build files, and CheckerWitness under verifier ownership
• make strict verification cache-free by default and expose data/prelude caches only as explicit trusted local state
• add aver cert check, an explicit non-certifying developer/CI preflight that keeps Rust validation, lake build, fresh witness elaboration, report pins, and the axiom guard while trusting local .olean imports and skipping only leanchecker --fresh
• keep verify/explain/inspect strict and reserve the CERTIFIED verdict for the full fresh replay; fast mode reports CHECKED
• route source/manifest/Wasm tamper tests through the fast preflight while retaining cache-free strict success and no-export sentinels
• remove stale v0 certificate files when reusing an output directory
• make release version detection include committed, staged, unstaged, and untracked aver-cert source changes
• align the CLI, architecture, trust-boundary, and release documentation

Validation

• cargo fmt --all -- --check
• cargo test -p aver-cert --all-features: 46 passed
• exact CI clippy commands: clean
• cert_verify_spec and cert_certify_spec test binaries: compile cleanly with wasm
• cert_verify_accepts_and_tripwires_fail_closed: passed locally in 10m29s (previous CI run was about 32m for this test)
• cert_verify_declines_hostile_expr_leaf_dispatch_construct_recursion_and_mutual_models: passed locally in 14m19s
• standalone DATA-cache corruption/rebuild preflight: passed in 84.7s
• independent security review confirmed that check omits exactly the final fresh replay and preserves the fresh post-cache witness plus axiom guard

The full certificate matrix is running in GitHub Actions on the final head.