Encrypted file vault

Per-file envelope encryption with share links, access codes, and streaming decryption for media — no object ever leaves the auth layer.

Detail content is placeholder pending CMS wiring.