Environment Variables and Secrets: Hoppscotch vs a Local Vault

Keep non-secret config in environments but resolve tokens from a local vault so the shared collection never carries a credential.