Derive a cryptographic key from a password using scrypt (RFC 7914). Memory-hard by design, making it more resistant to GPU/ASIC brute-force than PBKDF2. Returns the hex-encoded derived key and all tuning parameters (N, r, p).