Body:
Relying exclusively on environment variables increases operational friction for secret rotation. Add documentation and an adapter layer to allow fetching secrets from a secrets manager (AWS Secrets Manager / Vault) while preserving env var fallback for local dev.
Acceptance Criteria:
- A
secrets adapter module supports env fallback and a pluggable secret store.
- Documentation contains a recommended production secret storage workflow and rotation steps.
- No secret values are committed to the repo.
Body:
Relying exclusively on environment variables increases operational friction for secret rotation. Add documentation and an adapter layer to allow fetching secrets from a secrets manager (AWS Secrets Manager / Vault) while preserving env var fallback for local dev.
Acceptance Criteria:
secretsadapter module supports env fallback and a pluggable secret store.