Reusable external accounts, project-local capability bindings, secret references and provider adapters.