key_identity/1 returns the handle's pub A; sign/2 signs with a DIFFERENT key B (a rotation/misconfiguration race). The verify_signature guard in the shared tail must reject this -> :signing_failed (the mirror of AnchorWrongKeyHandle).