secrets

How config and secrets reach running code — the zod config boundary, the three injection paths (local, CI, Fly runtime), why a value in Infisical is not yet a value on a machine, and the NEXT_PUBLIC build-time exception. Use when adding a config value, rotating a key, or debugging "it's set but the app can't see it".