KEY_SEED_IS_PRF_DERIVED

True when the SeedVault entry was populated via the passkey PRF path. Absence (with a populated vault) means a legacy random-seed entry that must be wiped + re-derived.