Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.