Tests

Run bash tests/run.sh. Coverage includes dedicated-age and Stellar-compatibility modes, disjoint secret parsing, exact CSP, runtime network traps, and exhaustive legacy-format fixtures.