Symbol Management

Changes are written atomically to secrets.json. The service must be restarted for any changes to take effect — there is no hot-reload.