Add keep_all mode to preserve full font character set (fixes #97)

When keep_all=true in /api/encrypt, the generated font retains all
characters from the original base font. Only the specified plain/shadow
character pairs have their glyphs swapped. This is useful when the
obfuscated font needs to render non-obfuscated text as well.