diag: log verifyDeviceManifest error reason on both stored + derived attempts

@@ -314,7 +314,11 @@314314       manifest,315315       hexToPubkey(issuer!.signingPublicKeyHex!),316316     );317-  } catch {317+    // ponytail: temporary mesh-propagation diagnostic, strip before save318+    console.info("[Peach diag] verifyDeviceManifest OK with stored key");319+  } catch (storedError) {320+    // ponytail: temporary mesh-propagation diagnostic, strip before save321+    console.info("[Peach diag] verifyDeviceManifest with stored key threw:", String(storedError));318322     // Stored key may be stale (older builds persisted the key derived at319323     // first-pair and never refreshed it). The signing keypair is deterministic320324     // from (masterKey, deviceId) on both sides, so retry once with the locally@@ -326,8 +330,13 @@326330         masterForIssuer,327331         issuer.deviceId,328332       );333+      // ponytail: temporary mesh-propagation diagnostic, strip before save334+      console.info("[Peach diag] retry with derived key: storedSigning=" + issuer!.signingPublicKeyHex!.slice(0,12) + " derivedSigning=" + Buffer.from(derived.publicKeyRaw).toString("hex").slice(0,12));329335       body = await verifyDeviceManifest(manifest, derived.publicKeyRaw);330-    } catch {336+      console.info("[Peach diag] verifyDeviceManifest OK with derived key");337+    } catch (derivedError) {338+      // ponytail: temporary mesh-propagation diagnostic, strip before save339+      console.info("[Peach diag] verifyDeviceManifest with derived key threw:", String(derivedError));331340       return;332341     } finally {333342       masterForIssuer.fill(0);