Secrets and credentials

Know which credentials an agent can read, and when one moves.

Every agent on a laptop can read what the developer can read: .env files, cloud profiles, SSH keys, the keychain. The sensor finds each one by name, never by value, and watches for the moment one goes into a tool call or leaves the machine.