Motivation

• Bump the workspace minimum Rust version because a dependency (tfhe-ntt) requires a newer compiler.
• Restore and preserve zeroization behavior when converting secret-key-derived polynomials to avoid exposing secret-dependent coefficients in memory.
• Add a unit test to validate that measured noise stays within the ciphertext modulus bit-size.

Description

• Update the workspace rust-version in Cargo.toml to 1.91.1 and update the README minimum toolchain reference to 1.91.1.
• Keep conversions to power-basis wrapped in Zeroizing in crates/fhe/src/bfv/keys/secret_key.rs and use as_ref() when building Vec::<BigUint>::from(...) to avoid exposing inner secret values.
• Use std::mem::replace(..., Poly::<Ntt>::zero(&ctx)) and immediate Zeroizing::new(...) wrapping to avoid moving a Zeroizing value out.
• Add a unit test measure_noise_within_modulus_bits that generates a keypair, encrypts a random plaintext, measures noise, and asserts the noise is bounded by the ciphertext modulus bit-size.

Testing

• Ran cargo test and all tests completed successfully.
• Ran cargo +nightly fmt --all which completed successfully.
• Ran cargo clippy --all-targets -- -D warnings which completed with no warnings.

Codex Task