refactor/config-namespace-env-var
feat/fleet-staging-openbao
Pre-existing formatting issue caught by cargo fmt --check.
The env var name was a misnomer — ConfigClient resolves both config and secrets, not just secrets. The struct field was already config_namespace. Legacy SecretManager keeps the old var; this forces migration to ConfigClient for new code.