glanchor: check a claim token

Paste a glt1: token. The page fetches the certificate list from the token's node, reads the claim commit it names, and renders the same verdict document glanchor verify produces. Nothing here is trusted input from the page: every grade below is recomputed.

checking... a first run can take half a minute while the claim commit is fetched