Add FileStoreEncryptionTests covering ChaCha20-Poly1305 and AES-GCM round-trips and wrong-key rejection for the FSV2 AEAD path. Fix RestorePayload to wrap CryptographicException from AEAD decryption as InvalidDataException so RecoverBlocks correctly propagates key-mismatch failures instead of silently swallowing them.