SecretSpec 0.7: Declarative Secret Generation
Summary
SecretSpec 0.7 introduces declarative secret generation, enabling secrets to be auto-generated when missing via secretspec.toml. It supports five generation types (password, hex, base64, UUID, and command), preserves existing secrets (idempotent), and provides upgrade guidance for adopting the new behavior.