pinchbeck public witness — POST /cosign for Sigsum-style cosignatures. See https://iso.pinchbeck.dev for household onboarding.