Retrieve a Secret through the Container API

In an authorized OpenShift or Kubernetes exercise, use an existing API identity to retrieve one pre-created synthetic canary Secret in a namespace explicitly in scope. This demonstrates T1552.007 without collecting production credentials or enumerating other namespaces. Secret data returned as YAML is base64-encoded, not encrypted.