store a key

A Phantom import string, encrypted here and sealed on arrival.

This page is served by the same machine that decrypts it, so it protects the key in transit and in logs — not from this deployment itself. For that, seal it offline with tools/seal.mjs instead.