Repair reviewed browser demo behavior and evidence scope

Reject a certificate whose Merkle root or outputs commitment is broken

Verifier: add interval_bound_certs support

Abstain without a trust anchor; amber UNVERIFIED state

Static browser verifier with fetchable examples