"""Credential management: OS keyring, env var overrides, 2FA device token."""
# Implementation pending approval — see SPEC.md