feat: update classifier service and models

fix: harden ownership, model loading, and provenance handling

chore: pin image verification dependencies to CPU

feat: integrate PyTorch classifier as one verification signal