29. Secrets management

Store sensitive values with Secret resources while accounting for base64 encoding, etcd exposure, RBAC, rotation, and auditability. Connect external secret stores through operators or CSI-based delivery when stronger controls are required.