Function parse_key_env 

pub fn parse_key_env(s: &str) -> Result<Option<[u8; 32]>, String>

Parse an MCP_ENCRYPTION_KEY env-var value: a single base64-encoded 32-byte key. Empty string → None. Malformed → Err.