pub fn derive_key(passphrase: &str, salt: &[u8]) -> Result<[u8; 32]>Expand description
Derive a 32-byte symmetric key from a passphrase and salt using
Argon2id. Parameters follow the strong RFC 9106 / OWASP profile
(64 MiB memory, 3 iterations, 4 lanes) and must stay in sync with the
master-key KDF in storage::keychain::derive_master_key.