A secret in OCI Vault is rarely used in one place: the database holds a copy, and so does every app that connects to it. How I built a confirmation-gated agent skill that rotates the secret and every downstream copy without a window where they disagree, why the AI agent gets a version-bound phrase instead of a yes, and what broke in testing.