LockdownPassphraseStoreImpl
Encrypted per-device storage for lockdown passphrases.
Uses EncryptedSharedPreferences backed by an AES-256-GCM MasterKey (hardware keystore when available). The key is intentionally NOT gated behind biometric authentication so that auto-unlock can run in the background without user interaction.