Lightweight self-hosted secrets vault. AES-256 encryption, per-project master keys, RBAC, ~18MB footprint.