Problem

Right now if the genesis certificate is ingested from A2A it's verified in bls_sigverifier.
However if it is ingested via a block marker it is not verified.

Proposed Solution

Once the verification functions are moved outside of core, update the replay pathway to verify the certificate.