A practical guide to AI agent secrets management: scoped credentials, environment separation, rotation, redaction, and runtime patterns that keep production agents from leaking keys into prompts, logs, tools, and third-party systems.