kert 2c0a69a4d8 add HKDF credential derivation and auto-rotation ...

Single root key derives all 18 service credentials via HKDF-SHA256.
Bootstrap/service tiers rotate on key change vs every commit.
Provisioners update PostgreSQL roles and Gitea tokens automatically.
CI pipeline runs `api.auth provision` after each deploy.

2026-02-28 22:45:14 -05:00

3.9 KiB

Raw Blame History

View Raw