Migrate Notarius to credential lists

docs/cli.md

@@ -98,7 +98,7 @@ a session nor create a workspace, manifest, run, lock, adapter, or remote
 connection. Like every pipeline-loading command, they bootstrap the selected or
 conventional secrets directory before resolving configuration; `config show`
 never includes bootstrap reports or secret values in its YAML output.
-Typed credential references, including `notarius.llm_api_key`, must therefore
+Typed credential references, including `notarius.credentials[]`, must therefore
 resolve even though these inspection commands never construct an adapter.
 
 Campaign selection is optional for a pipeline without party-driven artifact
@@ -178,7 +178,7 @@ Behavior:
 - runs `render` before `extract`; an omitted or disabled Notarius
   configuration records an explicit `notarius_disabled` self-skip;
 - resolves every selected typed credential during the initial configuration
-  load, including a Notarius credential when extract is disabled, outside the
+  load, including Notarius credentials when extract is disabled, outside the
   selected range, or later skipped as resumable;
 - skips already-succeeded stages unless `--force` is set or a stage-specific
   resume check finds its durable result obsolete;