feat: vault core/CLI/workbench, vaultd token path, filetree view-state cleanup

Land password-vault dedicated workbench and mnote-vault-core/CLI, agent token
read path design, vault transport split, and retire obsolete filetree smokes.
Ignore local vault reimport scripts that trip secret scanners.

rust/Cargo.lock

@@ -2388,6 +2388,30 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "mnote-vault"
+version = "0.1.0"
+dependencies = [
+ "clap",
+ "mnote-vault-core",
+ "serde_json",
+]
+
+[[package]]
+name = "mnote-vault-core"
+version = "0.1.0"
+dependencies = [
+ "base64 0.22.1",
+ "hex",
+ "hmac",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "sha2",
+ "time",
+ "uuid",
+]
+
 [[package]]
 name = "mnote-web"
 version = "0.1.0"
@@ -2404,6 +2428,7 @@ dependencies = [
  "hyper-util",
  "leptos",
  "mnote-editor-core",
+ "mnote-vault-core",
  "notify",
  "reqwest",
  "rusqlite",