Function replace_injected_projection_for_local_acceptance 

pub fn replace_injected_projection_for_local_acceptance(
    root: &Path,
    reference: &InjectedSecretReference,
    version: &InjectedSecretVersion,
    material: &SecretMaterial,
) -> Result<(), InjectedSecretProvisionError>

Replaces one explicitly temporary Local acceptance projection before its consuming workload starts. The reference owns a complete leaf directory; failure leaves that capability absent rather than retaining stale material.