Plugin

Infrastructure as code: gated plan/apply, state and output inspection, and configuration validation via the terraform CLI.

HashiCorp Vault backend for the credential seam: KV v2/v1, AppRole machine auth, per-operation reads so rotation needs no restart, and compare-and-swap writes.