Add unit tests for private/encryption/encryption.py covering derive_key(), make_gcm_cipher(), encrypt(), decrypt(), round-trip encryption, and error handling for invalid keys or corrupted data.