Expand description
Credential-scoped control-plane operations.
These are deliberately separate from model-routed data-plane operations: callers must name one concrete stored credential, so account metadata never leaks through the public aggregate gateway.