store: add support for future `note` field; throw an error if JSON keys are left unconsumed during parsing of any object
made generated password functional (with react events & signals), rather than imperative
clear master password 30s after generating a password + leaving the window
add x-passe-version header, and the ability to reject clients with a too-old version if we make API format changes in the future