Function is_encrypted_cache_bytes 

pub fn is_encrypted_cache_bytes(cache_bytes: &[u8]) -> bool

Identifies the safe-migrate encryption envelope without attempting to decrypt it. This supports safe metadata inspection without exposing key material or payload contents.