Spells out the one-time secret generation that must NEVER be re-run. Documents local k3d setup and operations runbooks. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
