ZK Passport generates mathematical proofs verifying identity or sanctions status without transmitting raw passport data off the user's device