Function read_device_privkey 

pub fn read_device_privkey(user_id: &str, device_id: &str) -> Option<String>

Read the base64url-encoded X25519 private key for (user_id, device_id). Returns None when the key has not yet been written for this pair.