credential-rotation-enforcer

Credential rotation enforcer in Crystal that runs a four-step rotation contract against AWS Secrets Manager, Vault, GitHub PATs, and .env files.