Environment Configuration Plan

Design a configuration and secrets management approach for {{app}} across {{environments}}. Recommend what belongs in config versus code, how to handle secrets securely (not in the repo), per-environment overrides, validation at startup, and how to keep local, staging, and production in sync without drift. Note the common mistake of leaking secrets and how to prevent it.