Release Notes v0.3.44

Changes

• Normalize store unseal --from-secret passphrases the same way as other passphrase input modes, including trailing LF/CRLF handling.
• Add store-level passphrase verification so wrong unseal passphrases fail immediately and keep stores sealed.
• Lazily migrate existing stores by writing a .verifier after the first validated unseal.