Verify Native Cloud tokens in the Rust link receiver

Closed
TE
1d ago
+1198-4

Add the Rust receiver for Native Cloud tokens: verify Ed25519 signatures, current peer/service authority, VM epoch, freshness and single use. Daemon stamps retain the signed issue time. Serving stays disabled pending the supervised listener and live policy driver.

18 Rust receiver tests pass on Linux and macOS; full backend checks pass with 1,075 API tests. Rust 1.91 and Clippy pass.

Changelog

none