Module config 

Config-file-based credential resolver: [targets.<uuid>] entries win per key over the target’s environment variables. client_secret and bind_password are env-only, since the config file is often checked into a repo.

Structs

ConfigCredentialResolver 🔒

Merges config-file overrides over the target’s environment variables, reporting a missing required key by its env var name.

TargetEntry 🔒

Per-target overrides from the [targets] TOML section; each Some field shadows its env var. No client_secret or bind_password field, so secrets stay env-only.