Vendor: HashiCorp Vault (JWT/OIDC auth)