docs: reserve seam for complete capabilities

packages/credentials/credentials-local/src/invariant.ts

@@ -15,7 +15,7 @@ export const name = 'credentials-local-invariant'
 export const inject = ['invariants']
 
 /**
- * No runtime invariant: the seam companion (`dsh-credentials/invariant`) owns the
+ * No runtime invariant: the Service Definition companion (`dsh-credentials/invariant`) owns the
  * `credentials/updated` lifecycle contract; this provider's file/environment layering is
  * asynchronous I/O pinned by its unit suite.
  */

packages/credentials/credentials/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/credentials/credentials/README.md
-README.md: 95ef76d145727340d8135bf1d48babd6d8adb882
-README.zh.md: dce426fde734e3368317ccd2fa6848ca1e00048e
+README.md: fc4fb16991a3396f106bed65b468d0ae538bbab8
+README.zh.md: 6007618e5dc917ebc38fd322b34427cb5281e70c

packages/credentials/credentials/README.md

@@ -2,7 +2,7 @@
 
 English | [中文](README.zh.md)
 
-Abstract credential seam (`ctx.credentials`). One doctrine, three consequences:
+Credential Service Definition (`ctx.credentials`). One doctrine, three consequences:
 
 **Configuration carries references to secrets, never the secrets.** A settings section or `cordis.yml` entry says `apiKeyEnv: DEEPSEEK_API_KEY`; the value behind that reference lives with a credential provider. So the settings document stays safe to sync and to render in a configuration UI, `describe()` can answer "is this configured, where from, can I write it" without ever holding a value, and rotating a secret touches no configuration file.
 

packages/credentials/credentials/README.zh.md

@@ -2,7 +2,7 @@
 
 [English](README.md) | 中文
 
-抽象凭据 seam（`ctx.credentials`）。一条准则，三个推论：
+凭据 Service Definition（`ctx.credentials`）。一条准则，三个推论：
 
 **配置只携带对机密的引用，绝不携带机密本身。** settings 分节或 `cordis.yml` 条目写 `apiKeyEnv: DEEPSEEK_API_KEY`，引用背后的值归凭据提供方所有。于是设置文档可以放心同步、放心渲染进配置界面；`describe()` 无需持有值就能回答「配置了吗、来自哪层、能否写入」；轮换机密不触碰任何配置文件。
 

packages/credentials/credentials/src/index.ts

@@ -1,5 +1,5 @@
 /**
- * Credential seam (`ctx.credentials`). Settings and composition files carry
+ * Service Definition for the credential-reference capability seam (`ctx.credentials`). Settings and composition files carry
  * *references* to secrets — environment-variable names — while providers own
  * the actual values and their storage. Consumers resolve a reference once per
  * operation, so a changed credential reaches the next operation without any