Per-File Recipient Routing for Tenant Isolation in lieu of Multi-Vault

ADR-017 established per-project credential vaults as OCI artifacts in ZOT, encrypted with sops + age multi-recipient. The model held one recipient set per vault: every actor who could decrypt access.so