feat(milestone): merge phase/01 mastery-core → milestone/v0.3-mastery-scoring

Phase 1 complete. Mastery scoring + competency rubrics + VC issuer shipped.
9 slices, 5 waves, 238 tests passing, 13/13 REQ-IDs covered.
4/4 grill MUST conditions satisfied. VERIFY: APPROVE_WITH_NOTES.

---ci---
project: praxis
phase: 1
milestone: v0.3
status: complete
requirements:
  covered: [REQ-MAST-01, REQ-MAST-02, REQ-MAST-03, REQ-SCEN-02, REQ-SCEN-03, REQ-SCEN-04, REQ-PATH-02, REQ-NFR-MAST-01, REQ-NFR-MAST-02, REQ-NFR-VC-01, REQ-NFR-VC-02, REQ-NFR-IRT-01]
  partial: []
---/ci---

server/__main__.py

@@ -32,7 +32,11 @@ from fastapi.middleware.cors import CORSMiddleware
 from fastapi.staticfiles import StaticFiles
 from pipecat.transports.smallwebrtc.connection import SmallWebRTCConnection
 
+from db.store import PraxisStore
 from server.pipeline import build_pipeline
+from server.vc.verification import verify_credential
+
+_store = PraxisStore()
 
 
 def _env(key: str, default: str = "") -> str:
@@ -117,6 +121,21 @@ async def webrtc_offer(offer: WebRTCOffer) -> dict[str, str]:
         raise HTTPException(status_code=500, detail=str(exc))
 
 
+@app.get("/vc/verify/{credential_id}")
+async def vc_verify(credential_id: str) -> dict[str, Any]:
+    """Public, unauthenticated VC verification endpoint (D-043).
+
+    Returns {valid, status, issuer, credential, mastery, credentialTier,
+    verifiedAt}. 404 if the credential id is not found. No PII beyond what
+    the credential asserts.
+    """
+    await _store.init()
+    result = await verify_credential(_store, credential_id)
+    if result is None:
+        raise HTTPException(status_code=404, detail="credential not found")
+    return result
+
+
 # ── Static client serving (D-023, REQ-DEPLOY-13) ────────────────────
 # Mount client/dist as StaticFiles at "/" AFTER all API routes so they
 # take precedence. html=True serves index.html for "/" (SPA root).