Credentials

A local encrypted credential store for API keys, tokens, and passwords that lives at ~/.aibtc/credentials.json. Uses AES-256-GCM with PBKDF2 key derivation and a master password you never write to disk. You can add, get, list, and delete secrets from the command line, and there's a rotate-password command that re-encrypts everything atomically if you need to change the master password. It's separate from the wallet system, so you're managing another password, but the encryption is solid and the CLI is straightforward. Good for keeping secrets out of environment variables and config files when you're working with multiple API keys across skills.