#445 P3: Add TTL to Vault Secret Cache

Issue #7 from review: Stale secrets after rotation. Location: engine/config.py:70,216-244. Finding: _vault_cache has no TTL. Fix: Add 5-minute TTL or config reload signal. Effort: 2 hours.