pub fn resolve_passwords(
roles: &[RoleDefinition],
) -> Result<BTreeMap<String, String>, PasswordResolutionError>Expand description
Resolve password sources from environment variables.
Returns a map of role name → resolved password for every managed role that
declares a password.from_env source. External roles are reference-only and
never participate in password management.