Verification (KYB)

Orchestrate paid Didit KYB for the API key’s org.

1. GET /api/v1/verification — status
2. POST /api/v1/verification/checkout — create unpaid subscription + treasury address
3. POST /api/v1/verification/confirm — after USDC transfer (Idempotency-Key required)
4. POST /api/v1/verification/start — returns verificationUrl for a human browser

Agents must surface the URL; they cannot complete identity capture alone.

MCP: bruce_verification_status, bruce_verification_checkout, bruce_verification_start.