feat: redis, fileserver, httpclient 런타임 시점 구현 추가

docs/registries/secrets-classification.yaml

@@ -89,6 +89,18 @@ secrets:
     compatibility_impact: breaking
     required_test: secrets-contract:redis-password-no-leak
 
+  - name: APP_CACHE_REDIS_KEY_HMAC_SECRET
+    # Stable cache-key HMAC material. It is distinct from the Redis authentication credential.
+    classification: secret
+    source: secret-manager
+    rotation_policy: dual-read-restart-only
+    prod_default: null
+    dev_sentinel_prefix: __LOCAL_DEV_
+    owner_branch: codex-phase-a-ci-recovery
+    masking_rule: full
+    compatibility_impact: breaking
+    required_test: secrets-contract:redis-key-hmac-no-leak
+
   - name: APP_PRIVACY_PSEUDONYMIZATION_SALT
     # source: feature-data-retention-privacy-contract 2026-05-22
     # "pseudonymization key = HMAC-SHA-256 with rotating salt. salt rotation interval = 90일.