The canonical encoded request to register a Vaultwarden root account

What goes in the body payload when zero-knowledge protocol design rules out long-lived plaintext passwords. An HTTP POST with a JSON body, a 200 response, the master root account created. The body itself is the engineering exercise: three of its seven fields are cryptographic material the client has to derive locally before the first network call, because the server is never trusted with anything…