mint

Mints a fresh network-key.

Called once per proxy, on the first boot that finds no persisted key and no Floodgate file to seed from. A random UUID is a stronger credential than the old derived value: because the relay treats the key itself as the credential, deriving it from key.pem meant leaking that file also handed over the network's relay tenancy. Minting decouples the two.