InitialBootstrapSigningAuthentication

Compose this parser into the controller's installed signing interpreter. It requires a previously authenticated immutable bootstrap, the actual forced target journal and exact validator key. It does not call the outer transition verifier/controller recursively. The installer rechecks current source fences before entry, and the key-owning controller enforces its own monotonic target fences under the signing gate.