Function verify_key_package 

pub fn verify_key_package(
    data: &[u8],
) -> Result<VerifiedKeyPackageV2, KeyPackageVerificationError>

Apply the existing key-package admission checks to serialized bytes.

This function returns the verified package for callers that need it, but the backend uses it only to reject invalid packages. It does not alter the input.