Encrypted local vault library: key derivation, authenticated encryption, typed secret schemas, local persistence, backup, encrypted sync, recipient-key wrapping, and key rotation.