pub fn encrypt_with_key( plaintext: &str, key: &[u8; 32], ) -> Result<String, String>
Encrypt a string with an explicit key (ChaCha20-Poly1305), hex nonce || ct || tag.
nonce || ct || tag