Secret Delivery with Summon and Secretless

In this lab you deliver Conjur-managed secrets to applications two different ways, without the app ever speaking the Conjur API itself. First you store a database password in Conjur and give a machine identity (Conjur host) permission to read it. Then you use Summon to inject that secret as an environment variable at process launch, so it lives only in the process memory and is never written to disk. Finally you stand up the Secretless Broker with a PostgreSQL connector, so a client connects to the database through a local proxy and the application holds no credential whatsoever. You finish by proving zero-secret operation: the app config and environment contain no raw password, yet the connection still works.