Certifiable Deploy

Deterministic model packaging and cryptographic attestation — because 'trust me, it's the right model' isn't certifiable