List secrets with tags the caller has the requested access on (default: READ). Multiple values use AND semantics — e.g. ?access=UPDATE,DELETE returns secrets the caller can both update and delete.