[ARCH-327] Address security comments

[pavel-raykov]

No description provided.

[github-actions]

✅ API Diff Results - No breaking changes

---

📄 View full apidiff report

[Copilot]

Pull request overview

This pull request addresses security-related feedback by implementing input validation, improving error handling, and preventing accidental logging of sensitive data.

Key Changes:

• Added validation for key name and metadata length limits
• Implemented input validation for Ed25519 and X25519 private key sizes
• Enhanced the Raw type to prevent accidental logging through the Format method

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
keystore/admin.go	Introduces constants for max key name and metadata lengths, adds validation checks, and refactors to use these constants
keystore/keystore.go	Adds private key size validation for Ed25519 and X25519 key types, reorganizes imports
keystore/internal/raw.go	Implements Format method to prevent accidental logging of sensitive data via fmt verbs
keystore/reader.go	Refactors to use newKeyInfo helper function for consistency
keystore/admin_test.go	Updates test to compare individual key fields instead of entire structs to handle CreatedAt field differences

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.