Function initialize_injected_projection_for_local_foundation 

pub fn initialize_injected_projection_for_local_foundation(
    root: &Path,
    reference: &InjectedSecretReference,
    version: &InjectedSecretVersion,
    material: &SecretMaterial,
) -> Result<(), InjectedSecretProvisionError>

Writes one new Local-deployment Injected-secret projection without exposing the projection layout to the provisioner. The caller owns the selected deployment volume; a projection is never replaced in place.