Function default_path 

pub fn default_path() -> PathBuf

Canonical on-disk location for the secrets store: ~/.orca/secrets.json.

Falls back to ./secrets.json only if $HOME is unset (test/CI fallback). All CLI and server code should resolve secrets via this path so that orca secrets set and orca server always agree on a single file, regardless of the current working directory.