Setting up Open CMIS TCK

docs/LOCAL-TCK-RUNTIME.md

@@ -84,7 +84,7 @@ adapters/opencmis_console_adapter.py
 
 The adapter generates:
 
-- `session.properties`
+- `session.properties.redacted`
 - `groups.txt`
 - `console-runner-invocation.json`
 - `console-runner-stdout.txt`
@@ -114,7 +114,23 @@ org.apache.chemistry.opencmis.binding.cookies=true
 ```
 
 User and password fields are written only when explicitly supplied. Secret
-storage is not implemented in this step.
+values are written to a private session file for the ConsoleRunner process and
+removed after use; guide-board retains only `session.properties.redacted`.
+
+Credential references come from the target profile:
+
+```text
+credentials_ref: null
+credentials_ref: env:CMIS_TCK_USER,CMIS_TCK_PASSWORD
+credentials_ref: file:/absolute/path/to/cmis-tck-credentials.json
+```
+
+For an authenticated local run:
+
+```sh
+export CMIS_TCK_USER='alice'
+export CMIS_TCK_PASSWORD='local-secret'
+```
 
 ## Check Group Mapping