Some checks failed
Public Repo Readiness / Check Public Repo Readiness (push) Has been cancelled
Remove the EnvInjector closure and replace with a secrets_config path that loads notsecrets.toml and uses SecretResolver for env injection. Existing parse_env_line validation (blocked keys, null bytes) is preserved in the injection loop.