Clarify resolution metadata and sensitivity names

startup_bench_test.go

@@ -89,7 +89,7 @@ func BenchmarkStartupConstruction(b *testing.B) {
 			options := configkit.LayeredOptions[startupCatalog]{Definition: configkit.Definition[startupCatalog]{
 				// Include a simple path-based classifier, as catalog consumers use
 				// this callback even when the representative input has no credentials.
-				Secret: func(path configkit.Path) bool {
+				Sensitive: func(path configkit.Path) bool {
 					return strings.HasSuffix(path.String(), "/extra_params/token")
 				},
 				Resolve: func(catalog *startupCatalog, resolution *configkit.Resolution) error {
@@ -101,7 +101,7 @@ func BenchmarkStartupConstruction(b *testing.B) {
 							"timeout_seconds", "service_tier", "reasoning_effort", "api_key_env",
 							"api_key_required", "extra_params",
 						} {
-							info, exists := resolution.InputInfo(configkit.Keys("profiles", id, field))
+							info, exists := resolution.EntryInfo(configkit.Keys("profiles", id, field))
 							fields[field] = startupPresence{explicit: exists && info.Explicit, null: exists && info.Null}
 						}
 						captured[id] = fields