pub fn canonical_verify_key_enabled() -> bool
2026-09-25: True unless METRALE_NO_CANONICAL_VERIFY_KEY is present. Read once per process.
METRALE_NO_CANONICAL_VERIFY_KEY