Air Gapped Signing Workflow For Cold Storage

Use when moving crypto out of cold storage and the signing key must never touch an internet-connected machine; models the round trip where an intent crosses a QR or SD gap and the offline vault re-derives the approval display itself.