Verify exactly one compact JWS inside one authenticated compact JWE.

verify/4 requires content_types: [binary], a unique nonempty list of at most 64 nonempty strings (each at most 256 bytes). The outer protected cty must be selected. Inner envelopes or an inner JWS with cty reject as :nesting_depth. Both policies are explicit; no recursive dispatch or fallback occurs. Only complete success returns %{jwe: JWE.Result, jws: JWS.Result}. Failure returns a redacted JOSE.Error, never a decrypted partial result. Each policy supplies its own stage timeout; there is no combined timeout option. These are envelope facts, not JWT claims validation or authorization.