Generate Swarm secret/config management — external secret references, versioned rotation, config mounts.