NoteLace v0.2.3 — a vault-isolation fix I'm glad I caught

Shipped 0.2.3. The one that mattered: a user’s encrypted vault wasn’t fully isolated from another account on the same machine. Fixed, with a test so it stays fixed. A security bug in a notes app you’ve promised is private is exactly the kind you want to find yourself, not hear about.