New VEX Feed

URL must be https (or http://localhost in dev). Bearer tokens are encrypted at rest (ADR-0010). Per-feed format + release.