pub fn generate_aes_key() -> [u8; 32]
Generate a fresh 32-byte AES-256 key. Mirrors the Go side’s cinchcrypto.GenerateKey() used by cinch auth login to seed the per-user clip-encryption key.
cinchcrypto.GenerateKey()
cinch auth login