The tpm-enacttrust scheme appraised the quote signature and the PCR
digest, but never checked the nonce the attester bound into the quote's
qualifying data (TPMS_ATTEST.ExtraData). A correctly-signed quote
captured once could be replayed to obtain affirming at any later time.

ValidateEvidenceIntegrity now compares ExtraData against the session
nonce and returns BadEvidence on a mismatch, the same way the other
schemes check freshness. Includes tests for the matching and stale cases.

The integration tests are updated to match: the gen-token helper gains a
-nonce flag that binds the session nonce into ExtraData, the generator
passes the nonce through for enacttrust, and a stale-nonce row is added to
the freshness-check-fail test.