Yeram inbox receiver for hatogoya.com (spec/inbox.md).
GET /attest?challenge=<32-64 hex> returns a Google-signed attestation token whose nonces bind
this boot's TLS keys (tls-, sts-<sha256 of the SPKI>) and its boot key (sig-<multikey>) to the image.