Solana verified program builds: reproducible bytecode and the on-chain registry

How solana-verify and OtterSec's on-chain registry let anyone confirm that the program deployed at a given address matches a public GitHub repo — and why this matters for audits, users, and multisig upgrade flows.