feat(storage): per-app/owner/system encryption live: gatekeeper hands seed + fresh flag, storage unlocks layer, init seeds areas from factory/ (empties on new key); rmdir op; test-qemu checks sealed home + reboot persistence

crates/init/src/lib.rs

@@ -4,6 +4,7 @@
 extern crate alloc;
 
 mod devices;
+mod factory;
 mod launch;
 mod load;
 mod manifest;