feat(userId): worldAdsIdSystem submodule — World ID verified credential as a world.org EID

[bokelley]

Adds a worldAdsIdSystem userId submodule that emits the World ID verified-identity credential — stored first-party by the World Ads drop-in after a World ID ceremony — as a world.org EID, so it rides the bid request and an operator can verify-before-trust the proof.

This productionizes the pilot (a per-page pubProvidedId eidsFunction) into a proper, named, upstreamable submodule.

Emitted EID

source: "world.org"
uids[0]: { id: <rp-scoped nullifier>, atype: 3,
           ext: { stype: "other", proof: <full World ID verify response> } }

id is the nullifier (match/dedup hint); ext.proof is the verifiable credential. Consumers should verify the proof and key on the verified nullifier.

Config

pbjs.setConfig({ userSync: { userIds: [{ name: 'worldAds' }] } });

No params/storage — the drop-in owns the storage (_worldads_nf + _worldads_proof, read via getStorageManager).

Verified

Built into the scope3 prebid build and tested live: with pubProvidedId neutralized, worldAds alone emits the world.org EID with the proof (proofIdentifier: proof_of_human). Prebid does not strip uids[].ext.proof.

v2 (follow-up, not in this PR)

ext.proof carries the raw verify response — appropriate for a controlled operator-only path. For an open bidstream it should be a token sealed/encrypted to the operator's key (only the operator decrypts), not the raw proof. Tracked as v2.

🤖 Generated with Claude Code