Module secrets 

Secret Resolution for CI Execution

Provides trait-based secret resolution for CI tasks, enabling:

• Environment variable resolution (default)
• Mock resolvers for testing
• Custom provider integration (Vault, 1Password, etc.)

Structs

CIResolvedSecrets

CI-specific resolved secrets with convenience methods for IR types

EnvSecretResolver

Default resolver that reads secrets from environment variables

MockSecretResolver

Mock resolver for testing that returns predefined values

ResolvedSecrets

Resolved secrets ready for injection

SaltConfig

Salt configuration for secret fingerprinting with rotation support

Enums

SecretError

Error types for secret resolution

Traits

SecretResolver

Trait for resolving secrets from various sources

Functions

compute_secret_fingerprint

Compute HMAC-SHA256 fingerprint for a secret

resolve_all_task_secrets

Resolve secrets for all tasks in an IR