[infra] vault + chsettle + aurora for dev

README.md

@@ -114,7 +114,15 @@ make test-frontend  # Run Flutter tests only
 
 - Pushes to `main` build and deploy changed application services to the dev server.
 - Tags matching `v*` trigger a full production rebuild and deployment from that exact tagged revision.
-- Infrastructure workflows for `db` and `nats` remain separately controlled.
+- Infrastructure workflows for `db`, `nats`, and the dev `vault` remain separately controlled via `[infra]`.
+
+First-time dev bootstrap:
+
+```bash
+# merge a PR whose commit message includes [infra]
+# this deploys dev db, nats, and dev vault
+# after infra is green, merge normal app changes to main
+```
 
 Recommended release preparation: