feat: support optional encrypted file content

tests/test_manifest_documentation.py

@@ -10,6 +10,7 @@ STATIC_TOPIC_IDS = {
     "files.workflow.delete-managed-files",
     "files.governed-connectors-and-provenance",
     "files.reference.integrity-recovery-and-fail-closed-transports",
+    "files.reference.shared-storage-profile",
     "files.reference.snapshot-provenance-and-capabilities",
     "files.assurance.process-and-release-readiness",
 }
@@ -157,6 +158,7 @@ class FilesManifestDocumentationTests(unittest.TestCase):
         self.assertIn("bounded resumable integrity scan", topic.body)
         self.assertIn("quarantined", topic.body)
         self.assertIn("MASTER_KEY_B64", topic.metadata["recovery_unit"])
+        self.assertIn("Encryption envelope and wrapped-key rows", topic.metadata["recovery_unit"])
         self.assertTrue(topic.metadata["verification"])
         self.assertIn(
             "/api/v1/files/integrity/scans",