usage: kserve-decrypt [-h] --source-dir SOURCE_DIR [--resource-id RESOURCE_ID] Decrypt JWE-encrypted model artifacts using CDH key resolution. options: -h, --help show this help message and exit --source-dir SOURCE_DIR Directory containing encrypted model files to decrypt. --resource-id RESOURCE_ID KBS resource ID (kbs://///). Defaults to CONFIDENTIAL_RESOURCE_ID env var.