Resolve durable secret sink configuration from transport and environment.
Transport, environment, and optional preflight controls.
Resolved secret-sink configuration.
Stdio defaults to file mode when the default ledger is usable; HTTP defaults to off and requires explicit opt-in for either file or inline modes.
Error when an explicitly configured sink is unsafe or unavailable.
Resolve durable secret sink configuration from transport and environment.