Parse the four Terraform fields and bao kv put via @file. Never print values. Operator runs this; agents do not.
Read bootstrap creds from OpenBao only. Write non-secret attributes after create. Never print keys.
