Mark generate_random_bytes to return sensitive

[Hinton]

Type of change

- [ ] Bug fix
- [ ] New feature development
- [x] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

Make generate_random_bytes return Sensitive. Also migrate derive_shareable_key to accept a sensitive input.

Before you submit

• Please add unit tests where it makes sense to do so

[github-actions]

Checkmarx One – Scan Summary & Details – 0a86a6e6-e29d-4c2a-b270-d4ca2742f1bc

No New Or Fixed Issues Found

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.76%. Comparing base (435cecd) to head (9f85fe5).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #726      +/-   ##
==========================================
+ Coverage   60.71%   60.76%   +0.04%     
==========================================
  Files         173      173              
  Lines       10638    10651      +13     
==========================================
+ Hits         6459     6472      +13     
  Misses       4179     4179              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.