ZMS: Zero-Trust Secret Management for Agentic AI