pub fn load_key(path: &Path) -> Result<KeyPair, MkitError>Expand description
Load a keypair from path. Enforces the full disk contract above.
On non-Unix hosts the symlink/owner/mode checks are a no-op;
callers should keep keys under %USERPROFILE% and rely on default
ACLs (documented in docs/specs/SPEC-SIGNING.md ยง7).