pub fn pull_knowledge() -> Result<Vec<Value>, String>
Pull the knowledge store: vault-first (encrypted blob, decrypted locally), with a legacy plaintext fallback for accounts that never pushed a vault.