Streaming decrypt — AES-256-GCM per-segment, decrypted in WASM. Key never leaves WASM linear memory.