Yeram inbox receiver for hatogoya.com (spec/inbox.md).
GET /attest?challenge=<32-64 hex> returns a Google-signed attestation token whose nonces bind
this boot's TLS key (tls-<sha256 of the SPKI>) and its boot key (sig-<multikey>) to the image.