Secrets in the model: separate access handling

Secret fields use encryption and separate display handling. MCP masks encrypted values in tool responses.

External resource access also depends on agent configuration and team permissions. Keep integration keys out of public diagrams.