- cover get fallback paths for hydra metadata redis and postgres - cover create rotate and trusted RP update secret persistence - keep regression coverage isolated from broken handler package tests
- store client_secret after trusted RP update responses - add regression test for secret recovery on later detail fetch