Backup KDF was passing raw passphrase bytes to Argon2id without NFC normalization, causing cross-platform restore failures for non-ASCII passphrases (macOS NFD vs Linux NFC). Now matches derive_master_key behavior from crypto.rs. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>