An option could be something similar to how render.com does it: https://render.com/docs/configure-environment-variables#secret-and-environment-configuration-files

any work planned here?

This really would be cool