feat(fingerprint): Phase 2 - trusted local verification runner