crypto: harden API surface

Make it explicit that expiration is not being tested with Decrypt, and
test that the expiration is meaningful with DecryptWithExpiration.

Drop leftover references to gql.sr.ht

model: import from gql.sr.ht