fa7d7281f0
Document sourcing cephrgw-credentials from Vault via VSO as the primary path, using the shared default k8s auth role and the templated KV path kubernetes/namespace/cephrgw-system/default/cephrgw-credentials (no dedicated Vault role/policy needed). Keep the plain-Secret method as a fallback for non-cluster/kind use.