Validate a 32-byte hex EIP-3009 authorization nonce for bit entropy, sequential/zero-padding traps, and replay safety.