feat: add secrets-mcp-local gateway (proxy, unlock cache, plaintext tool gate)

crates/secrets-mcp-local/Cargo.toml

@@ -0,0 +1,25 @@
+[package]
+name = "secrets-mcp-local"
+version = "0.1.0"
+edition.workspace = true
+description = "Local MCP gateway: caches unlock credentials and proxies to remote secrets-mcp /mcp"
+license = "MIT OR Apache-2.0"
+
+[[bin]]
+name = "secrets-mcp-local"
+path = "src/main.rs"
+
+[dependencies]
+anyhow.workspace = true
+axum = "0.8"
+futures-util = "0.3"
+http = "1"
+reqwest = { workspace = true, features = ["stream"] }
+serde.workspace = true
+serde_json.workspace = true
+tokio.workspace = true
+tower-http = { version = "0.6", features = ["cors", "limit"] }
+tracing.workspace = true
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
+dotenvy.workspace = true
+url = "2"