pub const DECODE_DOMAIN: u64 = 0xD3C0_DE12_A5B6_C7D8;
Domain salt folded into every decode cold-tier key so a decode-ring blob can never collide with a Marconi prefix-hash key on a shared store/peer.