Secrets.md

Secrets manifest primitive — names, vault locations, retrieval CLI (e.g. 1Password op), rotation posture. Never values. Part of AI-Dev-Workspace-Primitives.