Purpose-bound salt: SHA-256("kuira:backup:v1"). Deterministic, public. Domain-separated from SeedDeriver.SEED_SALT and SeedDeriver.SIGIL_SALT — three independent secrets from the same passkey credential.
SeedDeriver.SEED_SALT
SeedDeriver.SIGIL_SALT