Distribute tokens, allocations encrypted

Admin funds an encrypted pool and signs a per-recipient allocation; the recipient claims and only they can read the amount. Built on the TokenOps SDK — verified live (see repo scripts/smoke.mjs).