Fixed

• Stop refusing paths with adjacent dots in checkpoints and chat reads
• Build the client's composite keys with keyenc

Security

• Harden the tools tree and the composite keys behind it