Interface BindingSink

Where bound credentials LAND. The default sink writes the @suluk/env manifest (typed + post-quantum-encrypted + commit-safe); a test passes an in-memory sink. mapping is the instance's bind (output key → env var name).

interface BindingSink {
    write(
        outputs: Record<string, string>,
        mapping: Record<string, string>,
    ): void | Promise<void>;
}