demo-validator — POST an agentic-trust evidence bundle to /validate. GET /health for config.