fix(verify): arm64 stack save, adaptive canary and host gating

Assisted-by: GLM 5.3

verify/sigparse.go

@@ -153,6 +153,13 @@ func paramSize(typ string) int {
 		return 2
 	case typ == "int8", typ == "uint8", typ == "byte", typ == "bool":
 		return 1
+	case typ == "string":
+		// ABI0 strings are a two-word header: data pointer + length.
+		return 16
+	case typ == "complex64":
+		return 8
+	case typ == "complex128":
+		return 16
 	default:
 		// Default to 8 bytes for unknown types.
 		return 8