Function verify 

pub fn verify(
    envelope: &DsseEnvelope,
    expected_payload_type: &str,
) -> Result<(), MuragentError>

Verify a DSSE envelope’s first signature. Uses verify_strict (rejects non-canonical encodings and small-order points).