5dce2c10f9
1. Add .relicario/salt to the initial git commit so it syncs across devices (Argon2 salt must match at unlock time). 2. Return a proper error instead of panicking when --output has no filename component (e.g., trailing ..). 3. Wrap the generated 32-byte image_secret in Zeroizing for consistency with the passphrase + master_key handling in Task 4. Caught in Task 6 review.