Provably fair

Outcomes are HMAC_SHA256(serverSeed, clientSeed:nonce:0). Hash is public before bets; seed is revealed on rotate.