Move scripts out of the workflow itself

script/vault-start.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+# Start Vault server in background
+echo "🔐 Starting Hashicorp Vault development server"
+vault server -dev -dev-root-token-id=root -dev-listen-address=127.0.0.1:8200 -dev-tls > vault.log 2>&1 &
+VAULT_PID=$!
+echo $VAULT_PID > vault.pid
+
+sleep 3
+export VAULT_SKIP_VERIFY=true
+if ! vault status; then
+    echo "❌ Vault failed to start. Logs ($(wc -l vault.log) lines):"
+    cat vault.log
+    exit 1
+fi
+
+echo "✅ Vault started successfully with PID: $VAULT_PID"