docs: document 1Password Secrets Automation

[sdelamo]

Summary

• Adds a Security Configuration guide page for using 1Password Secrets Automation or 1Password Connect to supply existing Micronaut Security configuration values.
• Documents OAuth client secret and JWT signing secret placeholder patterns, including Kubernetes secretKeyRef injection.
• States the scope boundary explicitly: Micronaut Security does not call the 1Password Connect API directly, add a client/cache/retry loop, or capture secrets at build/AOT time.

Fixes #628

Tests

• ./gradlew publishGuide
• Rendered output checked for the new 1Password Secrets Automation navigation entry and preserved ${OAUTH_CLIENT_SECRET}, ${JWT_GENERATOR_SECRET}, and ${JWT_GENERATOR_SECRET_BASE64} placeholders.

PR Assets

• Rendered 1Password Secrets Automation guide page

Release Targeting

• Target branch: 5.1.x
• Target release: 5.1.0
• Micronaut organization project selected by QA: 5.1.0 Release (Throw an error if multiple annotations are used. #147)
• Live project linkage: project Throw an error if multiple annotations are used. #147 exists, but this run could not apply the PR-to-project association. gh project item-add 147 --owner micronaut-projects returned unknown owner type; the direct GraphQL addProjectV2ItemById fallback returned INSUFFICIENT_SCOPES because the token lacks the project scope.
• Type label: type: enhancement

---

✨ This message was AI-generated using gpt-5

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds documentation describing how to use 1Password Secrets Automation (or 1Password Connect) to supply Micronaut Security secrets via standard configuration injection, without adding a 1Password client to the application.

Changes:

• Adds a new guide page explaining 1Password-based secret lifecycle + runtime injection patterns
• Documents placeholder usage for OAuth client secrets and JWT signing secrets (including Kubernetes secretKeyRef)
• Adds the new page to the security configuration guide TOC

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
src/main/docs/guide/toc.yml	Adds a navigation entry for the new 1Password Secrets Automation doc page
src/main/docs/guide/securityConfiguration/onePasswordSecretsAutomation.adoc	New AsciiDoc guide describing usage patterns and operational boundaries

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud