pub const SS_LEN: usize = 32;
Shared-secret length (ML-KEM, X25519, and our combined output all 32B).