secret manager security with DX of .env is quite nice varlock.dev - there's even an
@infisicalplugin (and 14 more) This gives you a unified way to deal with sensitive and non-sensitive config, plus built in validation, automatic redaction, and tons more.