BIMI Certificate Linter

Validate VMC/CMC certificates against MCR v1.7, RFC 3709, RFC 5280, and CABF requirements.