9db703b7da
Extend the secrets directive per operator (2026-08-11): store durable secrets in the vault AND 'secret get' the creds a task needs from it rather than reading on-disk copies.