Static + runtime HashiCorp Vault auditor. Scans repos for Vault secret paths, verifies existence in Vault, detects unused or abandoned secrets, and generates CI-ready reports.