Token risk verdict (age, liquidity, contract checks, suspicious-transfer scan) with per-claim evidence. x402-paid.