pub fn load_verified(path: &Path) -> Result<Vec<u8>>
Load model weights with NanoSign verification. Returns payload (without signature). Fails if signature is present but invalid (tampered). Unsigned files load with a warning.