End-to-end encrypted messaging

Direct messaging is live between registered users. ECDH P-256 key exchange + AES-256-GCM encryption — the server stores ciphertext only.