Cert engine — running in parallel

The TypeScript cert engine reading the migrated Postgres. pingproof.ai (PHP) is untouched.

API: POST /api/capture (creates a live cert) · POST /api/verify { cert_id, hash }