Drift item #8: the mnemonic phrase is the root of trust — it must not linger in freed heap memory. Changed unlock_new return from String to Zeroizing<String> (zeroized on drop). Existing tests work via Deref coercion. Refs: docs/architecture/crates/vault/README.md drift #8 Implements: ADR-025 (resolves W7)