fix(P0): encryption.py uses settings.ENCRYPTION_KEY from config properly

fix: Separate ENCRYPTION_KEY from SECRET_KEY, add key_last4 to avoid decrypt on list

fix(security): Real Fernet encryption for API keys, JWT secret enforcement, password validation