pub fn ensure_registry_secrets(
vault_conn: &Connection,
) -> Result<([u8; 32], [u8; 32]), String>Expand description
Reads the registry’s SQLCipher key and HMAC pepper from vault_meta,
generating and persisting both the first time the registry is used. Callers
never see the values live anywhere but here and inside the open registry
connection.