pub fn ensure_keys() -> Result<(Keys, bool)>
Ensure keys file exists, generating one if not present Returns (Keys, was_generated)