[capydev42]

I went through almost the exact same thought process.

Got tired of juggling .env files, environment variables, and various tools that either felt too heavy or required external services.

Ended up building a small tool for my own workflow where secrets stay in an encrypted local store and get injected at runtime when needed.

It’s interesting how many people independently arrive at similar solutions once they try to simplify things and reduce the trust surface.