CI Secrets Leak in the Obvious Places and the One Place Nobody Audits

CI secrets audits have a litany: echo statements, set -x, stack traces on failure, env dumps in debug...