- Wrap setSecret delete+insert in a cross-DB transaction - Add MCP metadata to all widget secret procedures and register in mcp.ts - Show configured tokens even when no repos use that provider - Only clear token input after mutation succeeds, with loading state