Runbook: secret access denied spike

Alert source: packages/testkit/alerts/security.rules.yaml

Canonical markdown: docs/runbooks/secret-access-denied-spike.md

[placeholder — landing 2026-Q2] Content mirrored from the canonical runbook under docs/runbooks/.