Operator console (gated)

Evidence decisions are the power gate: UNVERIFIED → VERIFIED → Passport. Requires ODP_OPERATOR_TOKEN. Every action is attributed to a verifier.