feat: Require Vault set up for first-time setup so all passed in secrets can be encrypted right off the bat

src/client/bedrock.rs

@@ -33,9 +33,9 @@ impl BedrockClient {
     config_get_fn!(session_token, get_session_token);
 
     pub const PROMPTS: [PromptAction<'static>; 3] = [
-        ("access_key_id", "AWS Access Key ID", None),
-        ("secret_access_key", "AWS Secret Access Key", None),
-        ("region", "AWS Region", None),
+        ("access_key_id", "AWS Access Key ID", None, true),
+        ("secret_access_key", "AWS Secret Access Key", None, true),
+        ("region", "AWS Region", None, false),
     ];
 
     fn chat_completions_builder(