Enforce safe secret handling by collecting secrets through one-time HTTPS forms, storing them in pass via scripts/vault.sh, and executing tools with environment injection via scripts/run_with_secret.sh so raw secrets do not enter chat context or logs.

通过一次性HTTPS表单收集密钥，使用脚本/vault.sh将密钥存储于pass中，并通过脚本/run_with_secret.sh执行工具并注入环境变量，确保原始密钥不会进入聊天上下文或日志中