SECRET_PROVIDE_METHOD].
Two valid shapes share this struct: the agent-initiated single-secret
reply (request_id + secret_name + secret_value, correlating with a
request_secret event) and the user-initiated bulk send (secrets).
The server enforces that exactly one shape is populated.