glm-5.1
c0010c144b
Implements deterministic password derivation using SLIP-0010 at the given path. derive_password returns raw truncated key bytes; derive_password_string returns Base64url-encoded (no padding) string. Both require unlocked state (ServiceLocked if locked). Includes unit tests for determinism, different paths, length truncation, locked error, and Base64url encoding.