2365b182f4
vault-plugin-secrets-arrstack is a new Vault/OpenBao secrets engine that dynamically mints arrproxy machine (per-user) API tokens, enabling terraform-driven onboarding of *arr services. It needs a Gitea repo to host its source before CI and releases can be wired up. - add config/git.unkin.net/unkin/repository/vault-plugin-secrets-arrstack.yaml - public repo, default branch main, delete-branch-after-merge, squash-only - Owners-only merge with required pre-commit/build/test Woodpecker checks