feat: implement VerifyContext builder (P1-022)

[polaz]

Summary

Implement ROADMAP task P1-022: builder with key resolution and verification policy controls.

Scope

• Add builder API for XMLDSig verification
• Support pre-set key and trait based key resolution
• Add policy controls: , ,
• Keep current verification path compatible while enabling context-driven checks
• Add/extend tests for builder defaults and policy enforcement behavior

Acceptance Criteria

• can be constructed via builder with sane defaults
• Verification pipeline can run using explicit key and resolver path
• Transform and URI policy controls are enforced
• Manifest processing flag is wired and covered by tests
• and pass

Estimate

2d

[coderabbitai]

🔗 Related PRs

#27 - feat(xmldsig): add ecdsa signature verification [merged]
#30 - feat(xmldsig): add full signature verify pipeline [closed]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!