// Package credentialgeneration owns immutable Connector credential-generation
// metadata and deterministic owner receipts.
//
// L2 authors each generation, but this package is its sole L0 persistence and
// exact-read authority. It also owns the separate per-generation dispatch gate:
// new generations and their enabled/fence-zero baseline publish atomically,
// while explicit authorized revocation and reenablement advance a monotonic
// fence. It exposes no mutable credential-name lookup, current-generation
// selector, secret storage, generic mode setter, or delete path. Secret bytes
// remain behind a future attested exact backend reader and never enter
// generation metadata, gate state, or receipts.
package credentialgeneration