writeTransactionCheckpoint
Replace the keystore's application checkpoint in the current native transaction. It commits or rolls back with MLS state, independently of application SQL and HTTP. Callers own the versioned format and must keep it small; this is not a general key-value store.