Problem
Right now if the genesis certificate is ingested from A2A it's verified in bls_sigverifier.
However if it is ingested via a block marker it is not verified.
Proposed Solution
Once the verification functions are moved outside of core, update the replay pathway to verify the certificate.