[MugdhoAI]

Summary

• Add Cache-Control: no-store to authentication and secret-management responses, including error responses.
• Add regression assertions for registration/login and secret create/list/read/update/delete responses.
• Document the response caching policy in the README.

Why

The API returns access tokens and decrypted secret values. Explicitly preventing cache storage reduces the chance that clients or intermediaries retain sensitive responses.

Verification

• GitHub Actions will run dependency audit, Ruff, Docker and Compose validation, PostgreSQL-backed tests on Python 3.12–3.14, and CodeQL.