Don't trust the randomness API: verify drand beacons and sampled values

Agents keep needing a random number that another party can check: picking a reviewer, breaking a tie, sampling a test case, running a small raffle. Math.random() works until someone asks "prove you di