Verify a wallet ownership proof

Recovers the signer from the personal_sign signature server-side and
confirms it controls the claimed address. On success the wallet is recorded
as proven under custody (upserted per address, so re-proving refreshes the
evidence rather than duplicating it). The challenge nonce is single-use.
Returns 400 if the challenge is unknown/expired or the signature does not
prove control.