pub fn write_profile_secrets( tenant: &StoredTenant, api_keys: &ApiKeys, profile_dir: &Path, ) -> Result<()>