pub use SecretStore;
/// Canonical on-disk location for the secrets store: `~/.orca/secrets.json`.
///
/// Falls back to `./secrets.json` only if `$HOME` is unset (test/CI fallback).
/// All CLI and server code should resolve secrets via this path so that
/// `orca secrets set` and `orca server` always agree on a single file,
/// regardless of the current working directory.