Issuer registry

Who may issue what, and how to check it yourself. Every issuer here is a did:web identity with published, fetchable signing keys; every credential it signs can be verified offline and revoked through one public status list.