Unit & instrumentation tests for Vault and signer routing

[mocolicious]

Author comprehensive unit and instrumentation tests:

• Ensure default signer routing and fallback logic works as specified.
• Cover key derivation, prompt flows, error conditions, and edge cases.
• Add tests for security boundaries (e.g., never leave secrets at rest, correct error when failing auth).