Function verify_envelope 

pub fn verify_envelope(
    envelope: &LdpEnvelope,
    secret: &str,
    signature: &str,
) -> bool

Verify an envelope’s signature using constant-time comparison.