atomic_write now appends .tmp instead of replacing the extension (manifest.enc.tmp, not manifest.tmp). image_secret is wrapped in Zeroizing so both KDF inputs wipe on drop. Caught in Task 4 review.
atomic_write now appends .tmp instead of replacing the extension (manifest.enc.tmp, not manifest.tmp). image_secret is wrapped in Zeroizing so both KDF inputs wipe on drop. Caught in Task 4 review.