Function verifyEIP3009

Verify an EIP-3009 TransferWithAuthorization signature (off-chain). Does NOT require an RPC connection — purely cryptographic verification.

Checks:

1. Recovered signer matches authorization.from
2. to matches expected recipient
3. value matches expected amount
4. Current time is within [validAfter, validBefore]