assay-vault

Vault module for assay-engine: KV v2, transit, dynamic credentials, Bitwarden-aligned vaults + collections + items + folders, biscuit-attenuated share links, sealing (Shamir / cloud KMS / HSM), audit forwarding, a Bitwarden-protocol compat shim, and a HashiCorp Vault / OpenBao KV2 read facade. PG18 + SQLite, both first-class.