Build-time manifest verification. Parses isocline.toml, RPCs
UniversalAdapter.buckets(keccak256(name)) and
RitualTickScheduler.hasDeclaredSecret(keccak256(name)), errors out on mismatch.
Set ISOCLINE_VERIFY=skip to bypass (prints a loud cargo warning).