Synthetic encrypted-file compatibility fixtures

This package contains only synthetic public content created locally: ZIP
ZipCrypto, ZIP WinZip AES-256, 7z AES-256 with encrypted headers, two PDF
password profiles, and modern encrypted DOCX/XLSX/PPTX files when a local
LibreOffice UNO runtime is available. The public test password is
`demo-public-2026!`; the public owner password is `demo-owner-2026!`; the
negative control is `wrong-public-2026!`. The owner-only PDF intentionally has
an empty user/open password and a print-only permissions flag (`/P=4`);
editing, copying, and other permissions are restricted.

Run the portable reproduction script with `python reproduce.py`. It uses local
open-source packages listed in `verification-results.json` and discovers
LibreOffice through the normal local tool path. Optional creators or parsers
are recorded as `not_run` when unavailable. RAR creation is explicitly
`not_run`; no unknown fixture is downloaded or fabricated.

Each fixture is checked with a local parser using the correct password and a
wrong-password negative control. The private companion run also exercised the
local backend format detector/hash extractor; that evidence remains in the
private `results.json` record. Durations in the public results are bounded
local compatibility-operation durations. They are not recovery-speed
measurements, and synthetic positive checks are not customer win-rate evidence.
No production API, database, payment provider, Hashcat/GPU, or worker fleet was
used.

Generated artifacts are CC0-1.0-equivalent synthetic content. Public results
retain portable commands, package/tool versions, fixture SHA-256 values, and
explicit tested/not_run outcomes without machine-local paths or raw tool stderr.