I still use .env files in local development. They are simple, they work with almost every framework, and they are easy to understand: OPENAI_API_KEY=sk-... DATABASE_URL=postgres://... But as I started using coding agents more often, plaintext secrets in project directories started to bother me. Giving an agent access to a repository is not exactly the same as giving another person access to your working directory, but it is close enough to make me more careful. If the r...