Field-level encryption (FLE): AES-256-GCM with HKDF-SHA256 key derivation. Port of the Go driver’s crypto/cipher.go.