RFC: Scoped secret store for system-managed tokens (#56)

* Add RFC for scoped secret store

* Rename RFC file from XXXX to 0056

* Remove old XXXX-placeholder RFC file

* Address review feedback: key prefix, migration, cleanup, call-sites, thread safety

Author: amirejaz