{# Every declared credential by owner: where it is set and its last four,
   never the value; a missing one shows the .env line to add. With a
   writable store, a key not in .env opens the set dialog; a key with a
   provider check can be tested wherever it is set. #}
{% from "pages/overseer/secrets/_macros.html" import backend_note, owner_tables with context %}
<div id="secrets" class="space-y-4">
  {{ backend_note("secrets", "Values saved here are encrypted and take effect without a restart.", "set") }}
  <p id="secrets-summary" class="text-sm text-aegis-text">{{ summary }}</p>
  {{ owner_tables("secrets", groups) }}
</div>