docs(secrets): interactive-console quickstart + discoverability sweep

- new task-first quickstart (deployment seeding + KEK-lockout walkthroughs) - runbook: document the sixth ReferenceStatus (PresentUnverified) + quickstart link - README + shared-contract + umbrella CLAUDE.md secrets row updated for 0.3.0 console - CLI usage text now mentions the interactive console (was undiscoverable from --help)
2026-07-19 14:55:53 -04:00
parent 0139c90f89
commit baea6cc2e0
6 changed files with 206 additions and 5 deletions
@@ -219,6 +219,9 @@ int Usage(string? error = null)
        defaults to the configured Secrets:MasterKey provider. Supply key material only by env-var
        NAME or file PATH — never as a literal. Run it with resolve traffic quiesced; it is
        idempotent and safe to re-run.
+
+        Run `secret` with no arguments at an interactive terminal to open the interactive
+        console (deployment seeding, KEK-lockout recovery, ciphertext bundles).
        """);
    return 2;
 }