How about having the signed data contain a hash of the photo and having some way for the verifier to access the photo (perhaps via an API)? An actual hard-to-c

How about having the signed data contain a hash of the photo and having some way for the verifier to access the photo (perhaps via an API)? An actual hard-to-clone chip to contain the authority to access the photo would be even better.