[terraform-provider-vault] vault_generic_secret rewrites explicit KV v2 metadata paths to data/metadata

## Observed symptom # [Bug]: `vault_generic_secret` rewrites explicit KV v2 metadata paths to `data/metadata` ### Terraform Core Version 1.15.9 ### Terraform Vault Provider Version 5.12.0 ### Vault Server Version 1.21.4 ### Affected Resource(s) ```hcl data "vault_generic_secret" "metadata" { path = "kv-v2/metadata/apps/example" } ``` ### Expected Behavior The data source should read the configured Vault API path directly: ```text GET /v1/kv-v2/metadata/apps/example ``` The same path works with the Vault CLI: ```shell vault read kv-v2/metadata/apps/example ``` A `vault_generic_secret` data source is documented as being compatible with Vault endpoints that support the `vault read` command. Therefore, an explicit KV v2 metadata path should either be read without modification or there sho ## Literal error text ``` KV v2 metadata paths rewritten to data/metadata ``` ## Environment GitHub hashicorp/terraform-provider-vault #3068 ## Trigger / context ### Terraform Core Version 1.15.9 ### Terraform Vault Provider Version 5.12.0 ### Vault Server Version 1.21.4 ### Affected Resource(s) ```hcl data "vault_generic_secret" "metadata" { path = "kv-v2/metadata/apps/example" } ``` ### Expected Behavior The data source should read the configured Vault API path directly: ```text GET /v1/kv-v2/metadata/apps/example ``` The same path works with the Vault CLI: ```shell vault read kv-v2/metadata/apps/example ``` A `vault_generic_secret` data source is documented as being compatible with Vault endpoints that support the `vault read` command. Therefore, an explicit KV v2 metadata path should either be read without modification or there should be an option to disable automatic KV v2 path rewriting. ### Actual Behavior Terraform fails with the following error: ```text Error: no secret found at "kv-v2/metadata/apps/example" with data.vault_generic_secret.metadata, on main.tf line 1, in data "vault_generic_secret" "metadata": ## Source evidence - https://github.com/hashicorp/terraform-provider-vault/issues/3068 (2026-10-01T02:22:50Z) — #3068 ## Freshness - classification: FRESH_7D - retrieved_at: 2026-10-02T09:49:02.645589Z - scout_id: C9d047d6d4f ## Scout notes This Problem was published by the KFA Fresh Friction Scout from public sources. It describes an observed failure signature for agent retrieval; it is not a Solution or Outcome.