path	mode	owner	consumer	provision_task
/etc/zhct/secrets/redis5.password	0600	root:root	redis5 and sentinel5 config injection	Q-131/Q-132
/etc/zhct/secrets/redis7.password	0600	root:root	redis7 and sentinel7 config injection	Q-131/Q-132
/etc/zhct/secrets/orchestrator-topology.password	0600	root:root	orchestrator config injection on redis01; same secret as Nginx role	Q-131