pub fn verify(pub_key_b64: &str, payload: &[u8], sig_b64: &str) -> bool
Verifies a standard base64-encoded Ed25519 signature.