pub fn decrypt(key: &[u8; 32], encoded: &str) -> Result<Vec<u8>, String>
Decrypt a base64url-encoded AES-256-GCM payload.