ADR-014: Google OAuth as the agent's own identity, not service account + delegation
Context
Context
Provisioning, credentials, connectivity, rotation, ORM usage, and guardrails for Aucert's PostgreSQL instances
How Aucert manages secrets across Azure Key Vault, K8s secrets, and the Astra Token Vault — current state, known gaps, and the migration to Workload Identity