Secure-tag authenticity verification

The locale-neutral tag route lands here. Authentic, opened, invalid, and replay outcomes are connected to the API in the verification phase.

This workflow remains a placeholder until its dedicated implementation phase.