Environment Variables

Per-project secrets injected at deploy time — values encrypted at rest with AES-256-GCM