Secret Key Externalization Gap

A recurring secret-management tension where encrypted config (e.g., Jasypt properties) still requires a WebLogic-held master key, leading to confusion about safe storage and runtime injection via environment variables or scripts.