Age verification server

Running. Veratad AgeMatch is the only verification provider - nothing here can mark a checkout verified without a PASS from them.

• POST /proxy/agematch - runs the check for one buyer
• GET /api/sessions/:token - what Veratad said, and attempts used
• DELETE /api/sessions/:token - reset a checkout, for re-testing

Public URL: https://veratad.twowombats.com
AgeMatch: live as WS@twowombats.com
Attempts allowed per checkout: 2