Addresses #756: Identity Resolver discovery does not validate credentials. Consuming implementations SHOULD validate signature, status, and verification material before using resolved credentials in derived conclusions or query results. Closes #756