XTS was previously covered only by a deleted throwaway example. Fold the verification into the committed suite so it runs under ./check: 16-multiple roundtrip, short-plaintext pad/strip roundtrip, multi-block sector, and the correct non-AEAD wrong-key property (wrong key opens to different garbage).