LiRPA certificate workflows

Reusable graph-and-certificate checks for LiRPA-style IBP artifacts. Example modules may re-export these names for old import paths, but the implementations live here.