Signing Mesh Tokens with VaultWhy the private signing key stays in Vault, how rotation avoids 403s, and the blast radius when a component is compromisedJul 9, 2026·13 min read·3