Credential broker CLI for AI agents. Injects credentials into subprocess memory — agent never sees plaintext values.