Function migrate_legacy_json 

pub fn migrate_legacy_json(
    conn: &Connection,
    raw_json: &str,
) -> Result<(), String>

Inserts raw JSON from a legacy vault.json into the vault table. Called once on first unlock after a Phase 1 → Phase 2 upgrade.