feat: add secret store foundation

apps/admin-api/src/main.rs

@@ -2,6 +2,7 @@ mod app;
 mod auth;
 mod error;
 mod routes;
+mod secret_crypto;
 mod service;
 mod state;
 mod storage;
@@ -15,6 +16,7 @@ use tracing::info;
 use crate::{
     app::build_app,
     auth::{AuthSettings, BootstrapAdminConfig},
+    secret_crypto::SecretCrypto,
     service::AdminService,
     state::AppState,
 };
@@ -51,7 +53,8 @@ async fn main() -> Result<(), Box<dyn std::error::Error>> {
                 .unwrap_or_else(|_| "Crank Owner".into()),
         },
     };
-    let service = AdminService::new(registry, storage_root, auth_settings);
+    let secret_crypto = SecretCrypto::new(&env::var("CRANK_MASTER_KEY")?)?;
+    let service = AdminService::new(registry, storage_root, auth_settings, secret_crypto);
     service.bootstrap_admin_user().await?;
     if env_flag("CRANK_DEMO_SEED") {
         service.seed_demo_assets().await?;