feat(credential-sharing): implement the Credential Sharing OpenSpec (M1-M3)

New @logicsrc/plugin-credential-sharing: a provider-neutral secret-sync engine
with env/.env, Doppler, Railway, and GitHub Secrets adapters behind one
CredentialProvider contract.

- engine: inspect -> diff -> plan -> approve -> sync -> rollback -> audit/export
- dry-run is the default for sync; --approve writes; destructive changes gated
- fingerprint-based diffs (salted SHA-256); raw values never printed or stored in
  plans/runs/audit; rollback pre-image kept in a 0600 .logicsrc vault (gitignored)
- github-secrets is write-only for values (sealed-box via libsodium), so it cannot
  be a sync source or value-restoring rollback target
- CLI: real `logicsrc credentials <providers|inspect|diff|plan|approve|sync|
  rollback|audit|export>` (replaces the prior stub)
- 4 JSON schemas registered in @logicsrc/validators
- flip logicsrc.com/credential-sharing band from coming-soon to available
- 37 tests pass; full env->env lifecycle verified; artifacts schema-validate

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

plugins/credential-sharing/src/providers/index.ts

@@ -0,0 +1,25 @@
+import type { CredentialProvider, CredentialProviderManifest } from "../types.js";
+import { envProvider } from "./env.js";
+import { dopplerProvider } from "./doppler.js";
+import { railwayProvider } from "./railway.js";
+import { githubSecretsProvider } from "./github-secrets.js";
+
+export const credentialProviders: CredentialProvider[] = [envProvider, dopplerProvider, railwayProvider, githubSecretsProvider];
+
+export const credentialProviderRegistry: Map<string, CredentialProvider> = new Map(
+  credentialProviders.map((provider) => [provider.id, provider])
+);
+
+export function listCredentialProviderManifests(): CredentialProviderManifest[] {
+  return credentialProviders.map(({ id, name, description, capabilities, authRequirements, status }) => ({
+    id,
+    name,
+    description,
+    capabilities,
+    authRequirements,
+    status
+  }));
+}
+
+export { envProvider, dopplerProvider, railwayProvider, githubSecretsProvider };
+export { parseEnv, applyEnv } from "./env.js";