All the UI fixes for now

src/app/api/tenants/[name]/secrets/route.ts

@@ -60,7 +60,8 @@ export async function POST(
       return NextResponse.json({ error: "Forbidden" }, { status: 403 });
     }
 
-    await writePackageSecrets(name, packageId, secrets);
+    // Use tenant-{name} to match the operator's vault path convention
+    await writePackageSecrets(`tenant-${name}`, packageId, secrets);
     return NextResponse.json({ ok: true });
   } catch (e: any) {
     console.error("Secret write error:", e.message);