#2456 Docs: access token mint/rotate --vault removed (swamp-club#2452)

What changed

swamp access token mint and swamp access token rotate no longer have a --vault option (swamp-club#2452). Before that, swamp-club/swamp#2586 (swamp-club#2437) made --vault fail on every path, local and --server. Token secrets always live in the _token-secrets control-plane vault. Passing --vault now fails with the standard unknown-option error.

worker token create --vault is unaffected.

Stale page

content/manual/reference/swamp-serve/access-commands.md

• Around line 44-47: the prose says --vault is rejected in datastore mode, and that local repos without a datastore store the plaintext in the vault selected by --vault. Neither applies any more.
• Around line 58: the mint options table has a --vault row. Remove it.
• Around line 95: the rotate section says local repos without a datastore store the rotated secret in the same vault as the original. Rotated secrets always go to _token-secrets.

Suggested content

Remove --vault from the mint and rotate sections. State that token secrets always live in the _token-secrets control-plane vault, and point readers who need the credential in another vault to the existing Shared-vault handoff section (reveal piped into vault put). Keep worker token create --vault documented.