pub fn decrypt_stored(stored: &str) -> Result<String>
Decrypt a stored value using the process key (legacy-plaintext passthrough; sealed-without-key errors).