Decisions
Environment-file configuration
Secrets and integration endpoints are loaded from a .env file via config/load_env.php.
accepted Verified from source
Decision
Keep secrets out of source; document key names in .env.example.
Consequences
Pages that forget to load env may see empty secrets (observed risk for some webhook paths).