Post-quantum cryptography CLI and MCP server. Hybrid ML-KEM/X25519 encryption, ML-DSA-87 signatures, encrypted vault with Argon2id, and identity publishing via WKD/DNS. Single static binary.