{ "_comment": "Optional: Map Google Secret Manager secret names to environment variable names", "_comment2": "If not provided, secrets are mapped automatically: secret-name -> SECRET_NAME (uppercase)", "examples": { "db-password": "DB_PASSWORD", "jwt-secret-key": "JWT_SECRET", "okta-client-secret": "OKTA_CLIENT_SECRET" } }