The Shield of Secrets. Encrypted, attestable, process.env-safe credentials vault with bootstrap, admin passkeys, developer enrollment, and enum-based storage.