If the secret exists but is not owned by the user, GetSecret now returns sql.ErrNoRows and the previous owner ID check is not useful. Unknown secrets should not fail the build.