Early product teams almost always store secrets the same way at first: a .env file on a laptop, a few environment variables in a hosting dashboard, and a S…