Play Framework

fix: correct version mis-attributions surfaced by the PF-135 fact-check

- Crypto.LEGACY_CIPHERTEXT_MESSAGE claimed the AES format 'changed in 1.13',
  but HKDF-SHA256/GCM shipped in the 1.12.x line (HKDF in v1.12.3, GCM base
  ~v1.11.12). Reworded version-agnostically (legacy vs current format) since
  the exact cutover predates 1.13; updated the CryptoTest assertion to match.
- CLAUDE.md listed non-existent playEnableHttps/playDisableHttps tasks (dropped
  upstream; HTTPS is via --https.port) and omitted the real playDist task.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>