Audit Chain 1.3.0

- drush audit-chain:seal --through=ID --reason=…
- verify() reports sealed_through / seal_intact / verified_from
- refuse sealing still-verifiable rows; seal_broken on prefix edit