Secure credential manager for AI tools. Secrets are injected transparently into shell commands via a PreToolUse hook — the agent never sees secret values or the master key. Trigger phrases include "add a secret", "inject credentials", "set up vault", "rv init", "rv add", or any secret/credential management request.