Store, inject, scope, and rotate secrets safely — API keys, tokens, DB credentials, signing keys. Use when adding a secret to a project, wiring secrets into an app or CI, or setting up rotation. Complements secret-scan (which detects leaked secrets).