Registry Credential Vault Model: src-vault, Multi-Recipient sops, and Actor-Scoped Access

The provisioning registry (zot OCI) became the primary coordination hub for domain and mode artifacts (ADR-016 consequences, migration 0015). This introduced registry credentials as a first-class conce