Function encrypt_keyring 

pub fn encrypt_keyring(
    session_key: &[u8; 32],
    plaintext: &[u8],
) -> Result<Vec<u8>, KeyringError>

Encrypt a keyring (for keygen tooling / orchestrator). Returns the encrypted blob: [12-byte nonce][ciphertext+tag]