Module vault 

Vault client used by handlers that need backend-specific secrets (Gitea token for create_session, Kubernetes credentials for the console and log-streaming handlers).

Modules

http_client

Thin Vault HTTP client. Authenticates via OIDC/JWT against a per-site jwt-manta-<site> role, then reads K/V v2 secrets under manta/data/<...>.