Verificar una constancia

docs://recipes/verify-a-constancia — check that a constancia PDF is authentic and current

Use when someone holds a Notificado constancia (their own, or one the other party filed) and asks
whether it is genuine or was altered. Works for any constancia, not only your firm's, and reveals
no message content or recipient data.

1. Pick exactly ONE input:
   - the verification code printed under the QR (e.g. "K7Q2-M9XD-4TPA"; case, spaces and dashes
     are forgiven), or
   - the SHA-256 of the whole PDF file as held (64 hex characters). Compute it over the exact bytes
     of the file; a re-saved or printed-and-scanned PDF has a different hash.

2. verifyConstancia({code:"<CODE>"})
   or
   verifyConstancia({pdfSha256:"<64 HEX>"})
   → authentic, issuedAt, deliveryStatus, pdfSha256, version, latestVersion, superseded
   Passing both, or neither? X_INPUT_INVALID — send exactly one.

3. Read the answer:
   authentic false and every other field null? The code or hash is unknown: the file is not a
   Notificado constancia, or it was altered. Say exactly that — do not speculate which.
   authentic true and superseded true? Genuine, but a newer version (latestVersion) exists — say so.
   authentic true and superseded false? Genuine and current.

Done when you have told the user one of the three outcomes above, with issuedAt in America/Bogota.

Tips
- Checking by code proves the code is real; only checking by pdfSha256 proves THIS file is
  unaltered. When a file is at hand, prefer the hash.
- The same check is public at https://www.notificado.co/verificar, for people without an agent.
- The evidence zip verifies offline too (verificar.js inside) — see
  docs://recipes/download-evidence-for-a-perito.
- Rate-limited to 30 checks a minute; never loop over guessed codes.