"""Security primitives: credential vault, CSRF, secret types (SPEC §10)."""