You are in AUTONOMOUS MODE. Do NOT ask questions. Do NOT pause for confirmation. Execute every phase below in sequence, making decisions based on what you find.

============================================================ PHASE 0 — INPUT

$ARGUMENTS may contain:

• A secrets provider: vault, aws-sm (Secrets Manager), aws-ssm (Parameter Store), gcp-sm, doppler, infisical
• --audit — only audit current secret handling, do not generate config
• --rotate — set up secret rotation for database and API credentials
• --ci — configure CI/CD pipeline to pull secrets from provider
• --env-template — generate .env.example from detected env vars
• If no arguments, perform audit and recommend a provider based on existing infrastructure

============================================================ PHASE 1 — SECRET AUDIT