doppler Use to fetch secrets. Requires env var (service token scoped to project). Setup 1. Create project in Doppler dashboard 2. Add secrets (GEMINI API KEY, BREX TOKEN, etc.) 3. Generate service token for project/config 4. Set on server Common commands Get a single secret: List all secrets (names only): List secrets with values: Run a command with secrets injected: Download secrets as JSON: Notes - Service tokens are scoped to a single project + config (e.g., , ) - strips quotes/newlines for scripting - Never log or echo secret values - Prefer for single secrets ---