Add reusable certificate and file validation helpers

Fix process-name ownership and module lookup outputs, add explicit SPKI hashing and bounded chain access, and improve WDM integration. Deprecate superseded entry points with migration guidance and align branch code and tests with the library style.

tests/ci-file-object-probe.h

@@ -24,6 +24,8 @@ typedef struct _DOMITO_CI_PROBE_RESULT
 // PASSIVE_LEVEL; referenced file object; file bytes must remain stable.
 // Writes observations, not an overall trust verdict. Frees both policies per call.
 _IRQL_requires_max_(PASSIVE_LEVEL)
-void DomitoProbeCiValidateFileObject(
+void
+DomitoProbeCiValidateFileObject(
     _In_ PFILE_OBJECT FileObject,
-    _Out_writes_(DOMITO_CI_PROBE_RESULT_COUNT) DOMITO_CI_PROBE_RESULT* Results);
+    _Out_writes_(DOMITO_CI_PROBE_RESULT_COUNT) DOMITO_CI_PROBE_RESULT* Results
+);