Feat v0.6.3 dead code sweep (#38)

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>

server/handlers/auth.go

@@ -345,7 +345,6 @@ func hashToken(token string) string {
 //   - AdminHandler.destroyVault (admin-initiated reset)
 //
 // Does NOT evict from UEK cache or write audit logs — callers handle that.
-// v0.29.0: accepts stores instead of using database.DB directly.
 func DestroyVaultDB(ctx context.Context, stores store.Stores, userID string) (deleted int64) {
 	if err := stores.Users.ClearVaultKeys(ctx, userID); err != nil {
 		log.Printf("⚠ DestroyVaultDB: failed to clear vault columns for user %s: %v", userID, err)
@@ -366,8 +365,6 @@ func DestroyVaultDB(ctx context.Context, stores store.Stores, userID string) (de
 // sessions survive server restarts.
 //
 // Used by BootstrapAdmin and SeedUsers where the password is known at startup.
-// v0.29.0: accepts stores instead of using database.DB directly.
-// v0.30.2: accepts optional uekCache to pre-warm vault on restart.
 func ProbeAndRepairVault(ctx context.Context, stores store.Stores, userID, password string, uekCache ...*crypto.UEKCache) {
 	vaultSet, encryptedUEK, salt, nonce, err := stores.Users.GetVaultKeys(ctx, userID)
 	if err != nil || !vaultSet {
@@ -493,7 +490,7 @@ func BootstrapAdmin(cfg *config.Config, s store.Stores, uekCache ...*crypto.UEKC
 		})
 		// If the actual password changed, the vault seal is stale. Probe it
 		// with the current password and destroy only if unwrap fails.
-		// Ensure handle exists (backfill for pre-v0.24.0 users)
+		// Ensure handle exists (backfill for users)
 		if existing.Handle == "" {
 			handle := auth.UniqueHandle(ctx, s.Users, models.HandleFromName(cfg.AdminUsername))
 			s.Users.Update(ctx, existing.ID, map[string]interface{}{"handle": handle})