feat(jwe): add endpoint to import wrapped key

[Manuthor]

No description provided.

[Copilot]

Pull request overview

This PR adds a new REST Crypto API endpoint to unwrap (RSA-OAEP decrypt) a JWE encrypted_key (CEK) and import the resulting symmetric key into the KMS, enabling subsequent alg=dir decrypt/encrypt operations without exposing CEK material to the caller. It also updates documentation, OpenAPI, and server/tests wiring to support and validate the new endpoint.

Changes:

• Add POST /v1/crypto/keys/unwrap handler to unwrap RSA-OAEP-wrapped CEKs and import them as managed symmetric keys.
• Register the endpoint in the server startup path and test app wiring; add integration tests and vector-runner support.
• Document the unwrap flow (MkDocs nav + REST Crypto API page + OpenAPI schema).

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
documentation/mkdocs.yml	Adds JOSE/REST Crypto documentation pages to MkDocs navigation.
documentation/docs/integrations/jose/rest_crypto_api.md	Documents the new unwrap endpoint and updates TOC/auth link.
documentation/docs/integrations/jose/jwe_decryption.md	New guide describing one-shot JWE decrypt vs persisted CEK unwrap flow.
crate/server/src/tests/test_utils.rs	Registers unwrap handler in test Actix app scopes.
crate/server/src/tests/rest_crypto/unwrap.rs	New integration tests for unwrap success + error cases.
crate/server/src/tests/rest_crypto/mod.rs	Includes the new unwrap test module.
crate/server/src/tests/rest_crypto/jose_vectors.rs	Adds vector runner support for unwrap round-trip vectors.
crate/server/src/start_kms_server.rs	Registers unwrap handler in /v1/crypto scope.
crate/server/src/routes/crypto/unwrap.rs	Implements POST /keys/unwrap endpoint: parse header, unwrap CEK, import key, return metadata.
crate/server/src/routes/crypto/models.rs	Adds request/response models for unwrap endpoint.
crate/server/src/routes/crypto/mod.rs	Exposes unwrap module + re-exports handler for registration.
crate/server/documentation/openapi.yaml	Adds schemas and path definition for /v1/crypto/keys/unwrap.
CHANGELOG/fix_jwe_import_wrapped_key	Adds a branch changelog entry for the new feature/tests/docs.

Comments suppressed due to low confidence (1)

documentation/docs/integrations/jose/rest_crypto_api.md:20

• The nested list under "Endpoints" in the Table of Contents is indented enough to be rendered as a code block by CommonMark/MkDocs. This breaks the TOC links; indent nested bullets by 2 spaces under the parent list item.