Passive Auth Proof
data class PassiveAuthProof(val sodBytes: ByteArray, val docSigningCert: ByteArray, val cscaCert: ByteArray)
Raw proof material from passive authentication, carried inside a CeiIdentityClaim.
A backend verifier can use this to independently verify the card data without re-reading the card.