pub fn set_peer_envelope_key(did: &str, pubkey_hex: &str) -> Result<(), String>
Set the peer’s envelope (X25519) public key (hex), then persist. Errors if no such peer.