Function verify_rotated_chain 

pub fn verify_rotated_chain(log_path: &Path) -> Result<u64>

Verify every retained generation and the active audit log as one chain.

The oldest available record is the retained-window trust boundary because rotation intentionally discards generations beyond the configured family. Every later record, including the first record after each rotation, must link to the preceding retained record.