Verify any BC.Game HiLo card. HMAC-SHA256(server, `${client}:${nonce}:${round}`) → `slideWindowNumber(hash, 52)` → card index in [0, 52).
