Upload an Ed25519 private key (PEM, PKCS8 format — what
generateKeyPairSync('ed25519') produces). It is imported
as non-extractable: once stored, this page can sign
with it but cannot read the raw key bytes back out. Storage is local
to this browser (IndexedDB) and never leaves the device.