Function run 

pub fn run(args: &ProvisionArgs) -> Result<()>

Run the full vault provision flow: banner, profile selection, account confirmation, provisioning, and the write-only key + next-step output.