* fix: per-tier master-key retrievers for mixed-cipher profiles
* refactor(abe): remove --abe-key flag and its global state * refactor(abe): rework scratch protocol and Go/C structure