Standalone vantagectl CLI (cobra, own module) that dumps and restores a whole Vantage MongoDB database, stamping a sha256 fingerprint of KEY_ENCRYPTION_KEY into the manifest so a restore cannot silently produce a database whose secrets are unreadable. The key itself never enters the archive.