nx_esign_eidas_gate.nx

nx_esign_eidas_gate.nx -- INDEPENDENT GATE: the eIDAS SES/AES/QES ladder + the Certificate of Completion. THE TOOTH THIS EXISTS FOR: Art 25(1) makes every real tier ADMISSIBLE, but Art 25(2) grants equivalence to a HANDWRITTEN signature to QES alone. Widening that to AES is the most expensive mistake in e-signature deployments, so the two predicates are proven separate at every rung. Also: dropping either the QSCD or the qualified certificate demotes QES back to AES. WRITE BUDGET (debt 1785519597): reg_put costs ~678ms and reg_get ~70us, so this gate upgrades ONE signature a property at a time -- 13 writes total, with unlimited free assertions between them. license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0