Browser-safe helpers for password-derived keys, keypair generation, and private-key encryption using Web Crypto API.