- Add XOR_KEY constant matching FORMAT.md Section 9.1 - Add xorHeader() function with signed byte masking (and 0xFF) - Update decode() with XOR bootstrapping: check magic, XOR if mismatch - Update decode() with TOC decryption: decrypt when flags bit 1 is set - Backward compatible: plain headers and unencrypted TOC still work