Deploy Vault on K8s with auto-unseal, injector sidecars, and dynamic secrets. Real configs and commands for production-grade secrets management.