CRE::Cli::Commands::VerifyBundle
VerifyBundle reads a compliance evidence ZIP produced by 'cre export' and re-runs every check the bundle's README documents:
- Per-file SHA-256 vs manifest.json
- Manifest Ed25519 signature vs public_key.pem (if both present)
- Audit log hash chain reconstruction
- Audit batch Merkle-root + signature reconstruction
Exit codes: 0 - all checks passed 2 - one or more checks failed 64 - usage error