pub fn wrap(plaintext: &[u8], passphrase_key: &[u8; 32]) -> Result<String>
Wrap arbitrary plaintext (typically a Megolm SessionKey) under the passphrase key. Returns nonce || ciphertext, base64-encoded for transmission.