Add pluggable page-level AEAD encryption support

[HTHou]

Summary

• add an optional file encryption header carrying provider, profile, key, wrapped data key, and file identity metadata
• introduce a provider-neutral AEAD SPI and registry without embedding a concrete cryptographic implementation
• encrypt compressed page bodies for non-aligned, aligned, and table-model write paths, and decrypt them on the corresponding read paths
• preserve existing unencrypted TsFile behavior and propagate encryption metadata through append, recovery, lazy loading, and sketch tooling
• add compatibility, round-trip, tamper-detection, append, and recovery tests

Motivation

TsFile currently has legacy encryption interfaces but no self-describing file-level context for pluggable page-level authenticated encryption. This change establishes the format and I/O integration points while leaving algorithm and key-management implementations to external providers.

Compatibility

• Existing unencrypted TsFiles keep their current layout and remain readable.
• Encrypted files require a registered provider matching the identifiers stored in the encryption header.
• Page metadata remains readable while compressed page bodies are protected with AEAD.
• The encrypted-file format and public API are still under discussion and are not intended as a compatibility commitment in this draft.

Validation

• ./mvnw spotless:check -P with-java -pl java/tsfile -am
• ./mvnw test -P with-java -pl java/tsfile -am -Dtest='PageCryptoContextTest,FileEncryptionHeaderTest,TDEPageAeadTsFileTest,UnClosedTsFileReaderTest,ForceAppendTsFileWriterTest,RestorableTsFileIOWriterTest,TimePageWriterTest' -Dsurefire.failIfNoSpecifiedTests=false
• 30 targeted tests passed with no failures or errors

Draft discussion points

• finalize the encryption-header schema and format-version semantics
• bind page authentication data to an unambiguous chunk/page identity
• refine page-index ownership and the separation between legacy encryption parameters and file AEAD context
• confirm append/recovery behavior and backward-compatibility expectations before stabilizing the format

[codecov-commenter]

Codecov Report

❌ Patch coverage is 74.49139% with 163 lines in your changes missing coverage. Please review.
✅ Project coverage is 61.44%. Comparing base (2465542) to head (dd20f4d).
⚠️ Report is 8 commits behind head on develop.

Files with missing lines	Patch %	Lines
...pache/tsfile/file/header/FileEncryptionHeader.java	73.56%	23 Missing ⚠️
...a/org/apache/tsfile/read/TsFileSequenceReader.java	64.15%	19 Missing ⚠️
...sfile/write/v4/AbstractTableModelTsFileWriter.java	41.37%	17 Missing ⚠️
...a/org/apache/tsfile/encrypt/PageCryptoContext.java	74.57%	15 Missing ⚠️
...g/apache/tsfile/read/reader/chunk/ChunkReader.java	60.00%	14 Missing ⚠️
...ain/java/org/apache/tsfile/write/TsFileWriter.java	59.37%	13 Missing ⚠️
...e/tsfile/write/writer/ForceAppendTsFileWriter.java	54.16%	11 Missing ⚠️
...org/apache/tsfile/write/writer/TsFileIOWriter.java	82.60%	8 Missing ⚠️
...che/tsfile/encrypt/EncryptionProviderRegistry.java	75.00%	7 Missing ⚠️
...ache/tsfile/read/reader/page/LazyLoadPageData.java	70.83%	7 Missing ⚠️
... and 10 more

Additional details and impacted files

@@             Coverage Diff             @@
##           develop     #866      +/-   ##
===========================================
+ Coverage    60.60%   61.44%   +0.84%     
===========================================
  Files          745      751       +6     
  Lines        49508    52045    +2537     
  Branches      7945     8420     +475     
===========================================
+ Hits         30002    31980    +1978     
- Misses       18046    18450     +404     
- Partials      1460     1615     +155     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.