<!-- GENERATED from convex-agents content/capabilities/env.json — do not edit by hand. -- Manage env vars + secrets Store secrets as Convex deployment env vars (npx convex env set), read them with process.env in actions, never commit them. Workflow 1. (per deployment). 2. Read via process.env.KEY inside actions (not queries/mutations). 3. Never hardcode or commit secrets; add to .env.local only for local. 4. Confirm it's set with , which lists names without printing the secret values. Rules - Secrets live in Convex env vars, never in code or git. - process.env only in actions ('use node' if n…