[AlyaGomaa]

Sub-PR of #2141: part 11 of 12. The parent PR stays open and unchanged; this PR carries one feature of it so it can be reviewed on its own.

What this PR adds

• Report validation (report_validation.py): received reports are checked against independent local evidence and analyst reviews; reports carry evidence type, detector fingerprint, method and observation time.
• Trust model: thesis base trust formula kept, stale penalties age out, trust learns from local and multi-peer agreement, mirrored and late reports earn no reward.
• Bounded signed network catch-up (catchup.py) with progress and history.
• Trust database: indexed lookups, compacted report history, WAL files kept on backup, legacy peer addresses migrated.
• Peers: reconnect to known peers, dial on all connected local interfaces, keep peers online between updates; Pigeon pointer updated; legacy Pigeon binaries start on macOS.
• Fides service-trust peer lookup; Iris protocol version compatibility.

Where it sits in the split

• Chain: part 11 of 12. Review and merge in order.
• Base: sebas/fix/detector_false_positives (Fix false positives in existing detectors #2207), so the diff shows only this PR's changes. GitHub retargets it to develop when Fix false positives in existing detectors #2207 merges.
• Next: Redesign web interface for investigation #2209.
• Size: 41 files, +10709 / -384 lines (tests are +4229 of them).
• Built from parent head 8d6533186.

Tests

• Unit suite on this branch (local, pytest tests/unit -n 3): 5553 passed, 2 skipped, 2 failed. Failing: test_native_restart_preserves_arguments_and_waits_for_worker. They fail the same way on the unsplit parent branch in the same local sandbox. Integration tests were not run locally.