Credential isolation

Tool credential routes, proxy validation, and external API audit trail.

Credential proxy ops

Doctor summary and Soft Wall cordon. Secrets never shown (last4/metadata only via vault UI).

No fields

Vault setup
Startup validation
Blocked
0 routes
0 warnings
0 failures
TimestampToolRouteCredentialStatusDuration