generateAndStoreKeyPair

Generates a P-256 key pair directly in AndroidKeyStore under alias.

Keys must be created inside AndroidKeyStore; importing software-generated private keys via KeyStore.setKeyEntry is unreliable (public cert may persist while KeyStore.getKey returns null). Any existing entry at alias is deleted first.