Upload a QR code image containing an HC1 string or SHLink
Decode HC1 format data (Base45 → zlib → CBOR → COSE)
Extract KID and issuer from COSE/CWT data
Verify the COSE signature using GDHCN trustlist
Extract SMART Health Link reference from HCERT
Authorize access to PIN-protected SHLink
Fetch FHIR resources from manifest