(aws-kms | gcp | azure) Injected client facade; bypasses the lazy
SDK import. Typed as the union of the three facades — each provider
validates the shape it needs.
Usage
import { type SecretsProviderOptions } from "secrets-plugin/src/index.ts";