Verify a catalog-template signature (base64 DER ECDSA_SHA_256) against the platform signing public key. Never throws — returns false on any structural or crypto failure; the caller owns the fail-closed decision.
Verify a catalog-template signature (base64 DER ECDSA_SHA_256) against the platform signing public key. Never throws — returns false on any structural or crypto failure; the caller owns the fail-closed decision.