SecretStore encryption, key lifecycle, audit, and secure file helpers.
This crate provides the security primitives used by the agent orchestrator for encrypting/decrypting SecretStore values, managing key rotation, emitting audit events, and creating files/directories with safe permissions.