Task: Create ores.security module

Extract the shared security primitives that ores.iam and ores.connections both need into a dedicated ores.security component.

• password_manager renamed to password_hasher; encryption_service to encryption.
• RAII for OpenSSL EVP_CIPHER_CTX via std::unique_ptr + EVP_CIPHER_CTX_free deleter.
• ores.iam, ores.connections, ores.cli link against the new library.
• Build green; tests pass.

Captured during execution; cleared into the parent story on close.

Moves the OpenSSL-handling rules into one place so future audits look at one component, not three.

Component in place; downstream components linked through it.