d3dd8a590f
- crates/secrets/ (NEW crate) — KeyringStore trait + Default/InMemory/File backends - crates/config/src/lib.rs — api_key resolution via Secrets::auto_detect (CLI → keyring → env → config-file) - crates/cli/src/main.rs — auth set/get/clear/migrate/list subcommands - crates/tui/src/config.rs + main.rs — wire keyring resolver, doctor reports backend - Lockfile updated for keyring 3.6 (apple/windows/linux native features) - One-time deprecation warning when api_key is read from config.toml