pub fn parse_encryption_key(raw: &str) -> Result<[u8; 32], String>Expand description
Parse a 32-byte AES key from a string — accepts hex (64 chars)
or unpadded base64 (43 or 44 chars). Tolerates leading/trailing
whitespace including newlines from kubectl create secret.