pub async fn hash_pass(password: &str) -> [u8; 32]
Derive a 32-byte key from a password using Argon2id. Parameters: 150MB memory, 10 iterations (matches src-tauri).