Map agent secret exposure paths from prompt surface, tool logs, storage target, masking depth, and handoff chain