Every file knows where it is archived, and when it was last checked

Added

• Every file knows its archive. The app now knows which archive and which revision holds each original, and where that package is stored. The index rebuilds entirely from the archives themselves: delete it, regenerate it, and you get exactly the same result — so it cannot drift silently.
• A per-file integrity journal. Until now a check said “all good” or “there is a problem”. It now records, for each file, the date and result of the last check — and a failure is a row like any other, carrying the checksum actually observed. The certificate of authenticity prints that date; when no check exists, it says so in words rather than leaving a blank.
• Your key publication address is now required to issue a certificate. Without it nobody but you can verify your certificates — and the address goes into the signed bytes, so it cannot be added afterwards. The issuing screen says so before, not after.

Fixed

• A duplicate translation showed “Delete” where the action was “Remove” — two very different gestures when files are involved.