When generating a new keypair for an existing Own identity, offer to archive the current key first (role self → self-archived) before generating the replacement. Without this flow, old keys are silently overwritten with no way to decrypt files they encrypted. The Role enum already has the self-archived variant; this is a UI + keyring flow wiring task.
When generating a new keypair for an existing Own identity, offer to archive the current key first (role `self` → `self-archived`) before generating the replacement. Without this flow, old keys are silently overwritten with no way to decrypt files they encrypted. The `Role` enum already has the `self-archived` variant; this is a UI + keyring flow wiring task.