prvng_core/nulib/lib_provisioning/kms/mod.nu

# kms/ subsystem facade — selective re-exports (ADR-025 Phase 3 Layer 3).
export use lib.nu [decode_kms_file get_def_kms_config is_kms_file on_kms run_cmd_kms]
export use client.nu [kms-decrypt kms-encrypt kms-list-backends kms-status kms-test main]
refactor(5 subsystem mod.nu facades): selective re-exports (ADR-025 L3) Batch of 5+1 facades converted from star re-exports to explicit symbol lists. defs/mod.nu: about.nu [about_info] lists.nu [6 symbols] integrations/mod.nu: ecosystem * (already selective — its re-exports are bounded) iac * (fixed in same commit) integrations/iac/mod.nu (bonus fix): Former `use iac_orchestrator *` was TWO bugs: (1) missing `./` prefix made the import path ambiguous, (2) plain `use` vs `export use` meant the facade never actually re-exported anything. Converted to `export use ./iac_orchestrator.nu [5 symbols]`. Side-effect: nu --ide-check errors went 2 -> 4 because iac_orchestrator.nu now actually loads and its pre-existing bugs become visible. Not a regression — bugs were hidden, now surfaced. kms/mod.nu: lib.nu [5 symbols] client.nu [6 symbols including multi-word "main"] mode/mod.nu: commands.nu [8 multi-word "mode X"] validator.nu [2 symbols] oci/mod.nu: client.nu [12 symbols] commands.nu [11 multi-word "oci X"] Validation: errors match baseline for all 5 (defs, integrations, kms, mode, oci). integrations/iac/mod.nu +2 errors are pre-existing bugs in iac_orchestrator.nu revealed by correct facade behaviour. Refs: ADR-025 2026-04-17 09:11:19 +01:00			`# kms/ subsystem facade — selective re-exports (ADR-025 Phase 3 Layer 3).`
			`export use lib.nu [decode_kms_file get_def_kms_config is_kms_file on_kms run_cmd_kms]`
			`export use client.nu [kms-decrypt kms-encrypt kms-list-backends kms-status kms-test main]`