TEE-as-Verifier for BitVM-style bridges: collapsing the canonical-label distribution problem