35. Configuration and Secrets

The flag package handles CLI options; environment variables suit container deployments. Validate configuration at startup and fail fast with a clear message. Never log secrets or commit them — read keys from the environment or a secret manager.