Secret Management Operations on the MCP Surface — Observation, Orchestration, and Permanent Exclusions

ADR-017 established that the daemon is structurally excluded from credential resolution: it has no age private key and cannot decrypt sops files. This is load-bearing — any actor with MCP access cann