Merge chore/code-hygiene: clear E2EE key on logout (user-approved)

frontend/src/components/NavSidebar.tsx

@@ -23,6 +23,7 @@ import {
   UserPlus,
 } from "lucide-react";
 import { api, clearActiveAccount, setActiveAccount, type Me } from "../lib/api";
+import * as e2ee from "../lib/e2ee";
 import { useLiveQuery } from "../lib/useLiveQuery";
 import { getUnreadCount, subscribe } from "../lib/notifications";
 import type { Page } from "../lib/urlState";
@@ -103,6 +104,14 @@ export default function NavSidebar({
     } catch {
       /* clear locally and reload regardless */
     }
+    // Forget this device's E2EE private key on sign-out: it's otherwise persisted in IndexedDB
+    // and auto-unlocks on the next visit, so on a shared machine the conversations would stay
+    // decryptable after logout. Re-entering the message passphrase is required next time.
+    try {
+      await e2ee.clearDevice(me.id);
+    } catch {
+      /* IndexedDB unavailable (e.g. private mode) — never let it block the logout + reload */
+    }
     clearActiveAccount();
     location.reload();
   }