feat: add encryption network module

[skgbafa]

Summary

• add a one-of-one TinyCloud encryption network module with threshold-ready network descriptors, persistence, audit, nonce, and ceremony tables
• add native TinyCloud invocation authorization for network create/revoke/decrypt using raw network URN resources
• expose encryption routes and node info nodeId, and add raw URI invocation support in Rust/WASM session helpers

Companion PR

• feat: add encryption network SDK js-sdk#228

Validation

• cargo check -p tinycloud-node
• cargo check -p tinycloud-sdk-wasm
• cargo test -p tinycloud-core --lib encryption_network

Notes

• This is part 1 of the encryption workflow. The JS SDK PR references this commit for its Rust WASM dependency.