pub fn default_secret_resolver() -> Box<dyn SecretResolver>Expand description
Construct the production-default SecretResolver for the current build.
- With
--features os-keychain: returns anOsKeychainResolver. - Without: returns
InMemorySecretResolver::new()so the standalone build resolves cleanly even when a Foundation profile is present; the in-memory resolver refuses every lookup, which the call site treats as “profile cannot run, fall through to compat env / local”.