fix(security): implement P1 loopback session token, P2 AAD filename binding, and P4 memory zeroization

src/verify.rs

@@ -213,7 +213,7 @@ pub fn verify_container(
             let mut found_v1 = false;
             for node in &all_nodes {
                 if node.parent_id == Some(2) {
-                    if crate::crypto::decrypt_node_name(active_dek, &node.name).is_some() {
+                    if crate::crypto::decrypt_node_name(active_dek, 2, &node.name).is_some() {
                         found_v1 = true;
                         break;
                     }