pub fn resolve_key_for_vault(vault_path: &str) -> Result<SecretString, String>Expand description
Resolve the secret key for a specific vault, checking in order:
MURK_KEYenv var (explicit key)MURK_KEY_FILEenv var (path to key file)~/.config/murk/keys/<vault-hash>(automatic lookup keyed to the given vault path).envfile in cwd (backward compat)