feat(creds): centralize credentials to ~/.creds/, add KNELCredsManager

Rewire all MCP wrappers, docker-compose services, and validate scripts
to source credentials from ~/.creds/ instead of scattered per-service
.env files. This removes credential duplication and prepares for the
HashiCorp Vault migration.

Add KNELCredsManager under tooling-cli with:
- Containerized Bitwarden CLI (pinned image, host stays clean)
- scripts/bw wrapper with session management and data persistence
- README documenting credential layout, consumer wiring, and roadmap

Also fixes latent bug in MCP wrappers that were silently getting empty
creds from ambient shell env — they now explicitly source ~/.creds/.

Tracked in Redmine #407. Discourse: https://community.turnsys.com/t/308

💘 Generated with Crush

Assisted-by: Crush

This commit is contained in:

mrcharles

2026-08-10 09:14:14 -05:00

parent 7dfce930b6

commit 1957dcbc7e

8 changed files with 188 additions and 24 deletions

									
										tooling-cli/KNELCredsManager/Dockerfile
									
		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				FROM node:22-slim

				ARG BW_CLI_VERSION=2026.7.0

				RUN npm install -g @bitwarden/cli@${BW_CLI_VERSION} && npm cache clean --force

				ENTRYPOINT ["bw"]