Add response-wrapped operator handoff

secrets-engine wrap writes a single-use OpenBao wrap token to a mode-0600
out-of-repo file and never prints it. KV reads and AppRole secret_ids are
wrapped with a 15m TTL cap. Unwrapped secret payloads fail closed.
Production wrap remains fail-closed.

Assistant: grok
Assistant-Session: 01a05f07-ae72-7781-9fcb-19efd61add00

src/secrets_engine/evidence_class.py

@@ -44,6 +44,7 @@ SHIPPED_RULES = (
             "lifecycle-deactivate",
             "provision",
             "session-revoke",
+            "wrap",
         ),
         "stages": ("prod",),
     },