docs: clarify Snowflake OAuth auth, add ArrowIngestor and non-re-exported ingestors (PR #808)

docs/guides/ingest.md

@@ -340,7 +340,7 @@ from semantica.ingest import SnowflakeIngestor
 snowflake = SnowflakeIngestor(
     account="myaccount",
     user="myuser",
-    password="mypassword",         # or private_key / token for key-pair / OAuth auth
+    password="mypassword",         # or private_key=... for key-pair; use authenticator="oauth", token=... for OAuth
     warehouse="COMPUTE_WH",
     database="ANALYTICS",
     schema="PUBLIC",
@@ -380,6 +380,8 @@ print(f"Enterprise data graph: {graph.stats()['node_count']} nodes")
 
 For authentication details (PAT vs. OAuth M2M for Databricks; password vs. key-pair vs. OAuth for Snowflake), schema/catalog introspection, and troubleshooting, see the dedicated [Databricks Integration](../integrations/databricks) and [Snowflake Integration](../integrations/snowflake) guides.
 
+> **Security Note:** Never hardcode credentials (`token`, `password`, `private_key`) in production code; pass them via environment variables (e.g., `DATABRICKS_TOKEN`, `SNOWFLAKE_PASSWORD`) or a secrets manager.
+
 ## Combining All Five Sources
 
 Once you have text from each source, `AgentContext.store()` accepts a flat list of strings. Semantica embeds and indexes them together — the context graph has no concept of which string came from which source unless you add metadata explicitly.

docs/reference/ingest.md

@@ -29,6 +29,7 @@ icon: "database"
 | `SnowflakeIngestor` | Snowflake data warehouse queries and table exports |
 | `DatabricksIngestor` | Databricks Unity Catalog metadata, Delta table queries, and lineage |
 | `ParquetIngestor` | Apache Parquet files and partitioned datasets with column selection |
+| `ArrowIngestor` | Apache Arrow IPC and Feather file processing |
 | `XMLIngestor` | XXE-safe XML parsing with optional XSD schema validation |
 | `EmailIngestor` | IMAP/POP3 email ingestion with attachment extraction |
 | `OntologyIngestor` | OWL/RDF/Turtle ontology file ingestion |