Add response-wrapped operator handoff

secrets-engine wrap writes a single-use OpenBao wrap token to a mode-0600
out-of-repo file and never prints it. KV reads and AppRole secret_ids are
wrapped with a 15m TTL cap. Unwrapped secret payloads fail closed.
Production wrap remains fail-closed.

Assistant: grok
Assistant-Session: 01a05f07-ae72-7781-9fcb-19efd61add00

evidence-classification.yaml

@@ -45,7 +45,7 @@ rules:
 
   - id: production-control-mutation
     kind: load-bearing
-    actions: [revoke, lifecycle-suspend, lifecycle-deactivate, provision, session-revoke]
+    actions: [revoke, lifecycle-suspend, lifecycle-deactivate, provision, session-revoke, wrap]
     stages: [prod]
     emission: local-outbox
     note: >-