Expand description
admin config secret set — write a provider credential into the profile’s
secrets file without hand-editing JSON.
Known provider names map to their typed field; any other name becomes a
custom secret (e.g. minimax). Infrastructure secrets
(database/pepper/signing seed) are rejected so they cannot collide with the
typed fields on round-trip.