Add Consumer API OpenID4VP verifier site - #1536

Summary

• extend the existing Consumer API /r/{referenceId} onboarding page with an embedded mobile-first OpenID4VP verifier
• render the verifier markup in AppOnboarding.cshtml; the TypeScript bundle now only controls existing DOM nodes and performs browser-only loading, decryption, validation, and state updates
• parse the NMSHD reference hash, fetch Token/RelationshipTemplate content, decrypt XCHACHA20_POLY1305 token content with @nmshd/crypto, and fall back to the previous onboarding flow when the content is not a VP token
• validate TokenContentVerifiablePresentation.value with the existing Credo-based verifier and render loading/valid/invalid/closed states without a mock app/phone shell
• extract displayed credential values from the Verifiable Presentation only; missing values are omitted instead of being replaced with sample/default credential data
• build Vite output into OpenId4VpVerifierSite/dist and let the Consumer API MSBuild target copy it into wwwroot/openid4vp-verifier at local build time; generated wwwroot assets are no longer committed
• build verifier assets in a separate Docker Node stage and copy them into the .NET build stage, so the DHI .NET SDK image does not need npm

Validation

• npm run typecheck
• npm run build
• NUGET_PACKAGES=/Users/tnotheis/Documents/Codex/2026-09-03/e/work/.nuget/packages NUGET_HTTP_CACHE_PATH=/Users/tnotheis/Documents/Codex/2026-09-03/e/work/.nuget/http-cache dotnet build Applications/ConsumerApi/src/ConsumerApi.csproj --no-restore
• NUGET_PACKAGES=/Users/tnotheis/Documents/Codex/2026-09-03/e/work/.nuget/packages NUGET_HTTP_CACHE_PATH=/Users/tnotheis/Documents/Codex/2026-09-03/e/work/.nuget/http-cache dotnet build Applications/ConsumerApi/test/ConsumerApi.Tests.Integration/ConsumerApi.Tests.Integration.csproj --no-restore
• confirmed generated OpenID4VP assets are present in the Consumer API static web assets manifest
• docker build --target build-env -f Applications/ConsumerApi/src/Dockerfile .
• docker build -f Applications/ConsumerApi/src/Dockerfile .

Notes

• For this first version only reference algorithm 3 / XCHACHA20_POLY1305 is handled.
• Credential status checks remain disabled for the minimal verifier.
• The Vite build warnings about node:fs externalization and direct eval come from transitive crypto/Credo dependencies.
• Local targeted MTP test execution starts the integration test assembly but hangs without producing a result in this environment; the integration test project itself builds successfully.