Netcue - Secure password share

Passwords are encrypted with AES-256-GCM before storage; only ciphertext + IV + auth tag are stored.

Each secret is stored at `secret:<uuid>` in Redis; there is no list or search endpoint.

Requests without a valid UUID return 404, so the ID is the only lookup key.

Redis TTL enforces expiry, and one-time secrets are deleted immediately after a successful read.

Nginx + Express rate limits reduce automated guessing attempts.

Secure password share