nx_vault_dynamic.nx

nx_vault_dynamic.nx -- sovereign DYNAMIC SECRETS (HashiCorp Vault "dynamic secrets engines" gap from vault_capability_census.tsv). Instead of storing a long-lived credential, the vault GENERATES a fresh, short-lived credential on demand, bound to a LEASE (composes nx_vault_lease): it auto-expires and is revocable. Each issue yields a DISTINCT credential -> a leak is bounded to one short-lived cred, not the master. The generator is deterministic here (gate/replay); PRODUCTION pulls from the CSPRNG. ORIGINAL.