Sync relay ciphertext boundary

Use end-to-end encrypted, per-entry opt-in synchronization. The Lore sync relay must never see plaintext or hold participant encryption keys. Synchronize only entries users explicitly approve, and keep sharing reversible rather than enabling bulk or server-readable team memory.