fafba02948
P4 steps 5-6: a Vault/OpenBao secrets engine that mints scoped ghp access tokens via ghp's admin API (authenticating with the static admin service token now deployed), plus its Terraform provider. Mirrors the vault-plugin-secrets-gitea / terraform-provider-giteavaultsecret pair.