036-offline-issuer-verbs

The offline issuer verbs: trust root-generate, trust issuer-sign and trust issuer-verify

Amends 006 for the command half of the offline issuer enrollment contract the owner approved on 2026-10-03 (docs/proposals/007-offline-enrolment-contract.md). Adds three verbs to the existing binary: root-generate writes a new offline owner seed only to an explicit path, with owner-only permissions and an explicit confirmation option; issuer-sign signs one enrollment, rotation or revocation only after strict decoding, history checks and a confirmation naming the exact payload digest; issuer-verify checks a detached authorization against an independently pinned owner key and, with the full option group, issuer eligibility under the operator's exact pin. Formats and verification are 035's; no verb reads the product home, contacts a network, opens a cell or store, or signs an arbitrary domain.