Module credentials 

Credential storage — keyring and encrypted-file backends.

Module Structure

Submodule	Responsibility
mode	Backend selection enum (Keyring / File / Auto)
keyring	OS keyring creation, liveness, disable detection
encryption	AES-256-GCM encrypt/decrypt (pure, no IO)
storage	CredentialStorage — orchestrates backends
legacy	Legacy auth.json migration

Structs

CredentialIdentity

Validated identity for a stored provider credential.

CredentialStorage

Generic credential storage interface.

CustomApiKeyStorage

Custom API Key storage for provider-specific keys.

Enums

AuthCredentialsStoreMode

Preferred storage backend for credentials.

Functions

clear_custom_api_keys

Clear all custom API keys from secure storage.

load_custom_api_keys

Load all custom API keys from secure storage.

migrate_custom_api_keys

Migrate plain-text API keys from a config map into secure storage.