Native OS services: * Linux: Secret Service (libsecret) via secret-tool **[already integrated]** * Windows: Credential Manager (CredRead/CredWrite) + DPAPI for encryption * macOS: Keychain (security CLI / SecItem APIs). * Environment variables as a fallback (cross-platform).