5004ba057f
- Added AES-GCM cache for at-rest broker snapshots keyed on token, with URL as additional data. - Added `onSnapshot` hook to RemoteAuthCredentialStore for persisting applied snapshots. - Exposed cache read/write and TTL defaults through the coding-agent re-exports. - Added `getAuthBrokerSnapshotCachePath` with `OMP_AUTH_BROKER_SNAPSHOT_CACHE` override.