failClosedCorruptionHandler
fun <T> failClosedCorruptionHandler(producePath: () -> Path, fileSystem: () -> FileSystem? = { kryptostoreFileSystem }): ReplaceFileCorruptionHandler<T>
Fail-closed corruption handler: quarantine the unreadable file as *.corrupt and rethrow. Defaults are never written automatically — recovery requires an explicit user action.