Content-uuid

JCS → SHA-256 → uuidv8 (src/integrity/content-uuid.ts).

FNV toUuid stays for cheap folds; SHA seals proofs.

Verify on read — mismatch is tamper.

Receipt: b14d6e94-a846-82b8-90b1-669922beaac5 · set f02fb883-0647-8f26-ac67-57cf88acb8a3