Restore flow — passkey auth and wallet reconstruction

Full restore pipeline:

- Authenticate with synced passkey → PRF regenerates encryption key
- Decrypt master key → derive Critical Data Key → decrypt wallet backups
- Re-import each wallet using existing `import_wallet` infrastructure
- Handle partial failures gracefully (some wallets restore, some fail)