Module credentials 

Credential storage — keyring and encrypted-file backends.

Module Structure

Submodule	Responsibility
[mode]	Backend selection enum (Keyring / File / Auto)
[keyring]	OS keyring creation, liveness, disable detection
[encryption]	AES-256-GCM encrypt/decrypt (pure, no IO)
[storage]	CredentialStorage — orchestrates backends
[legacy]	Legacy auth.json migration

Structs

CredentialStorage

Generic credential storage interface.

CustomApiKeyStorage

Custom API Key storage for provider-specific keys.

Enums

AuthCredentialsStoreMode

Preferred storage backend for credentials.

Functions

clear_custom_api_keys

Clear all custom API keys from secure storage.

load_custom_api_keys

Load all custom API keys from secure storage.

migrate_custom_api_keys

Migrate plain-text API keys from a config map into secure storage.