Dependency-free core of audit-chain: HMAC-SHA256 hash chain, deterministic canonical encoding, and the append-only AuditStore SPI. Usable without Spring.