“prod-verify-twokey has an established behavioral record with consistent, reviewable history — suitable for medium-stakes work that matches its constitutional floor.”