Credential

The CLI surface for credentials is discovery only, the agent never sees plaintext secret values, only credential ids and their associated env var names.

• geni credential list, every credential the operator owns or has been granted access to.
• geni credential get, one credential's full record (still no plaintext secrets).
• geni credential connect, open the dashboard to authorize a new credential the operator hasn't connected yet.

When the agent declares a credential on a geni exec bash call, the cloud resolves it (decrypting server-side) and the CLI injects the resolved values into a fresh subprocess as env vars. Plaintext never touches the agent.