Add pkcs7_pad and pkcs7_unpad functions for block cipher modes: - Pad data to block size multiples with N bytes of value N - Validate and remove padding on decryption - Add InvalidPadding variant to CipherError