Signed Thinking Payload Replay

Signed “thinking” (and “redacted_thinking”) blocks fail verification when replayed through sanitizers or text transforms—e.g., UTF handling or payload text mutation—causing later turns to return HTTP 400 and breaking multi-turn state.