pub fn decrypt_file(path: &Path, master_key: &[u8]) -> Result<()>
Decrypt a single file using streaming chunked decryption.