fix(procmgr): clear secret caches on config reload

Invalidate secret-backend and Windows SCM env caches before reloading
processes.d so config gates re-evaluate with fresh values.

Author: jose-manuel-almaza

pkg/procmgr/rust/src/manager/mod.rs

@@ -248,6 +248,47 @@ impl ProcessManager {
         Ok(StopResult { uuid, state })
     }
 
+    pub(crate) async fn handle_reload_config(
+        &self,
+        exit_tx: &mpsc::Sender<ExitEvent>,
+        restart_tx: &mpsc::Sender<PendingRestart>,
+    ) -> Result<ReloadResult, Status> {
+        self.operation_gate
+            .try_begin(OperationKind::ReloadConfig)
+            .await?;
+        let result = self.handle_reload_config_impl(exit_tx, restart_tx).await;
+        self.operation_gate.end(OperationKind::ReloadConfig).await;
+        result
+    }
+
+    async fn handle_reload_config_impl(
+        &self,
+        exit_tx: &mpsc::Sender<ExitEvent>,
+        restart_tx: &mpsc::Sender<PendingRestart>,
+    ) -> Result<ReloadResult, Status> {
+        crate::config_gate::clear_secret_caches();
+        let new_configs = self.config_loader.load();
+
+        let removed = self
+            .remove_and_stop_dropped_config_processes(&new_configs)
+            .await;
+
+        let apply = self
+            .apply_reloaded_config_processes(new_configs, exit_tx, restart_tx)
+            .await;
+
+        self.reconcile_processes_after_reload(&apply, exit_tx, restart_tx)
+            .await;
+
+        self.update_startup_order().await;
+        Ok(ReloadResult {
+            added: apply.added,
+            removed,
+            modified: apply.modified,
+            unchanged: apply.unchanged,
+        })
+    }
+
     async fn update_startup_order(&self) -> Vec<String> {
         let result = recompute_startup_order(&self.processes.read().await);
         *self.startup_order.write().await = result.order;