feat(integrations): secret authority service for UI-driven secret staging

Add SecretAuthorityService + endpoints so the setup wizard and
integrations hub can stage secret bundles and bind authref URIs
directly from the UI, instead of requiring out-of-band Vault seeding.
Wire the new service behind IntegrationPolicies, expose
SecretAuthorityDtos on the contracts library, and register an
UpsertSecretBundle audit action for the emission library.

Closes BOOTSTRAP-006 from SPRINT_20260413_004.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-04-14 07:55:49 +03:00
parent cadfe10fcc
commit 78afc39d2d
7 changed files with 821 additions and 0 deletions

View File

@@ -288,6 +288,7 @@ public static class AuditActions
public const string Test = "test";
public const string Discover = "discover";
public const string RunCodeGuard = "run_code_guard";
public const string UpsertSecretBundle = "upsert_secret_bundle";
}
/// <summary>Actions for the Platform module.</summary>