Verify evidence capsule

Paste a capsule JSON. Keys are fetched from the public registry — never trust a key embedded in the capsule alone.