refactor: workspace secrets-core + secrets-mcp MCP SaaS

- Split library (db/crypto/service) and MCP/Web/OAuth binary
- Add deploy examples and CI/docs updates

Made-with: Cursor

Cargo.toml

@@ -1,33 +1,38 @@
-[package]
-name = "secrets"
-version = "0.9.6"
+[workspace]
+members = [
+    "crates/secrets-core",
+    "crates/secrets-mcp",
+]
+resolver = "2"
+
+[workspace.package]
 edition = "2024"
 
-[dependencies]
-aes-gcm = "^0.10.3"
-anyhow = "^1.0.102"
-argon2 = { version = "^0.5.3", features = ["std"] }
-chrono = { version = "^0.4.44", features = ["serde"] }
-clap = { version = "^4.6.0", features = ["derive"] }
-dirs = "^6.0.0"
-dotenvy = "^0.15"
-flate2 = "^1.1.9"
-keyring = { version = "^3.6.3", features = ["apple-native", "windows-native", "linux-native"] }
-rand = "^0.10.0"
-reqwest = { version = "^0.12", default-features = false, features = ["rustls-tls", "json"] }
-rpassword = "^7.4.0"
-self-replace = "^1.5.0"
-semver = "^1.0.27"
+[workspace.dependencies]
+# Async runtime
+tokio = { version = "^1.50.0", features = ["rt-multi-thread", "macros", "fs", "io-util", "process", "signal"] }
+
+# Database
+sqlx = { version = "^0.8.6", features = ["runtime-tokio", "tls-rustls", "postgres", "uuid", "json", "chrono"] }
+
+# Serialization
 serde = { version = "^1.0.228", features = ["derive"] }
 serde_json = "^1.0.149"
 serde_yaml = "^0.9"
-sha2 = "^0.10.9"
-sqlx = { version = "^0.8.6", features = ["runtime-tokio", "tls-rustls", "postgres", "uuid", "json", "chrono"] }
-tar = "^0.4.44"
-tempfile = "^3.19"
-tokio = { version = "^1.50.0", features = ["rt-multi-thread", "macros", "fs", "io-util", "process", "signal"] }
 toml = "^1.0.7"
+
+# Crypto
+aes-gcm = "^0.10.3"
+sha2 = "^0.10.9"
+rand = "^0.10.0"
+
+# Utils
+anyhow = "^1.0.102"
+chrono = { version = "^0.4.44", features = ["serde"] }
+uuid = { version = "^1.22.0", features = ["serde"] }
 tracing = "^0.1"
 tracing-subscriber = { version = "^0.3", features = ["env-filter"] }
-uuid = { version = "^1.22.0", features = ["serde"] }
-zip = { version = "^8.2.0", default-features = false, features = ["deflate"] }
+dotenvy = "^0.15"
+
+# HTTP
+reqwest = { version = "^0.12", default-features = false, features = ["rustls-tls", "json"] }