First release of the credential-store interface, host-provided import.
Published after the doc comments were corrected against the design: the
kind list, the kind-as-hint rule, denied not leaking existence, and both
list-secrets and get-secret no longer overselling the session as the
compartment. wkg publishes with --skip-dupes, so this text is permanent.