Add secure storage: encrypt sensitive partitions (wallets/secrets) and harden key handling

Implement encryption-at-rest for sensitive Satobox data (e.g., Bitcoin Core wallets, Specter config/secrets, SSH keys, Tor keys, node credentials) by moving them to an encrypted volume/partition and ensuring safe provisioning, unlock, and recovery workflows.

