Key pair generation
The tool generates 32 random bytes for the private key, clamps them per the Curve25519 convention (clearing and setting specific bits so the scalar is valid for X25519), and derives the public key by multiplying the curve's base point by that scalar. Both values are base64-encoded, matching the output format of the wg genkey / wg pubkey command-line tools.