Independent proof-of-execution notary: send a payload, get back a signed {hash, timestamp, signature, keyId} receipt provable against the public key at /pubkey.