The solution to me seems simple enough, but maybe there’s some obvious roadblocks (or agendas) I’m missing.

1. Get a unique secret token issued via the appropriate Government service that links back to your identity and vacc status.
   
2. Store encrypted in (hopefully freedom respecting) scanning app of choice on your device.
   
3. Done