Proteos.Encryption.GoogleCloudKms

Google Cloud KMS key provider for Proteos Application Layer Encryption: wraps and unwraps tenant master keys with a symmetric Cloud KMS key (Encrypt/Decrypt, ENCRYPT_DECRYPT). Implements the IKeyProvider KEK seam only — no EF Core, tenant or derivation logic.