imports

Opaque-handle access to a secrets backend. Returning `secret` rather than the underlying value lets the host gate reveal independently of lookup.

Unwraps an opaque `secret` handle into its underlying value. Split from `store` so a host can audit or restrict reveal calls separately.

A single secret, statically identified by the `(implements ..)` label a component imports it under, instead of a runtime `key` argument.