Value encrypt/decrypt with node:crypto AES-256-GCM, the enc:insomnia:v1:
value format and ciphertext well-formedness check, encrypted path walking,
and createFieldEncryptionHooks() for NeDB serialization hooks. The read hook
never throws and never drops a document; failed decryptions keep the original
value and are recorded in a failure report. The write hook never writes
plaintext for an encrypted field.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
