Secrets Vault Encrypted storage for sensitive credentials. Create Secret POST /api/v1/apps/{id}/secrets { "name": "STRIPE_KEY", "value": "sk_live_..." } Features AES-256 encryption at rest Secrets injected at runtime Separate from env vars for security Audit logging for access