Reproduces #8341: once Electron regenerates its os_crypt key, every get
fails with decrypt-catalog. The new test expects the old catalog to be
preserved, gets to read as empty, and the next save to re-key. A guard
test keeps the catalog in place when it cannot be preserved.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>