feat(secrets): register runtime AddZbSecrets on Central + Site roles (ScadaBridge T3)

src/ZB.MOM.WW.ScadaBridge.Host/Program.cs

@@ -177,6 +177,7 @@ try
                 .GetValue<bool>(nameof(ZB.MOM.WW.ScadaBridge.Security.Auth.AuthDisableLoginOptions.AllowOutsideDevelopment)));
         builder.Services.AddSecurity(disableLogin);
         builder.Services.AddCentralUI();
+        builder.Services.AddZbSecrets(builder.Configuration, "Secrets");
         builder.Services.AddInboundAPI();
 
         // Inbound-API auth re-arch: the shared ZB.MOM.WW.Auth.ApiKeys verifier +

src/ZB.MOM.WW.ScadaBridge.Host/SiteServiceRegistration.cs

@@ -14,6 +14,7 @@ using ZB.MOM.WW.ScadaBridge.NotificationService;
 using ZB.MOM.WW.ScadaBridge.SiteEventLogging;
 using ZB.MOM.WW.ScadaBridge.SiteRuntime;
 using ZB.MOM.WW.ScadaBridge.StoreAndForward;
+using ZB.MOM.WW.Secrets.DependencyInjection;
 using ZB.MOM.WW.Telemetry;
 
 namespace ZB.MOM.WW.ScadaBridge.Host;
@@ -49,6 +50,7 @@ public static class SiteServiceRegistration
         var siteDbPath = config["ScadaBridge:Database:SiteDbPath"] ?? "site.db";
         services.AddSiteRuntime($"Data Source={siteDbPath}");
         services.AddDataConnectionLayer();
+        services.AddZbSecrets(config, "Secrets");
         // Adapter that surfaces the site id to
         // StoreAndForwardService through DI WITHOUT introducing a
         // StoreAndForward → HealthMonitoring project-reference cycle. Must be