Yeram inbox receiver (prototype) for proto.hatogoya.com.
GET /attest?challenge=<32-64 hex> returns a Google-signed attestation token whose nonces bind
this TLS key (tls-<sha256 of the SPKI>) and this boot's signing key (sig-<multikey>) to the image.