Verify a passport independently

1. Obtain the cluster's public key from a trusted source (the cluster's official website, a contract annex) and compare the key fingerprint.
2. Take the token from the QR code and download the passport JSON from /api/pasport/<token>.
3. Verify the text in haqiqiylik.bayonot against haqiqiylik.imzo with the Ed25519 algorithm:
   node vositalar/imzo-tekshir.js <passport URL> kalit.pem

Do not take the public key from the site that shows the passport: a fake site can display its own key.