feat(notsecrets): Decryptor — identity-driven age decryption with MAC verification

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

crates/notsecrets/src/lib.rs

@@ -1,3 +1,4 @@
+pub mod decrypt;
 pub mod encrypt;
 pub mod error;
 pub mod format;
@@ -8,6 +9,7 @@ pub mod _legacy;
 
 pub use error::AgeError;
 pub use identities::{FileKey, Header, Identity, Stanza, X25519Identity, ScryptIdentity, SshEd25519Identity, SshRsaIdentity, EncryptedIdentity};
+pub use decrypt::Decryptor;
 pub use encrypt::Encryptor;
 pub use recipients::{Recipient, X25519Recipient, ScryptRecipient, SshEd25519Recipient, SshRsaRecipient};
 pub use sources::{BitwardenSource, FileSource, PromptSource};