/**
 * Fetch RSA private key using key-id (kid)
 *
 * Lookup order:
 * 1. Redis (shared cache, TTL-based)
 * 2. Vault (authoritative source)
 */
export default function getPrivateKeyFromVault(kid: string, vaultProvider: any): Promise<string>;