| 1 | {{if secrets}} |
| 2 | ## secret aliases |
| 3 | use exact alias form `§§secret(name)`; real values are injected automatically |
| 4 | only use provided aliases; do not expose or invent secret values |
| 5 | values may contain special characters, so quote or escape them correctly in shell or code |
| 6 | comments help explain each secret's purpose |
| 7 | {{secrets}} |
| 8 | {{endif}} |
| 9 | {{if vars}} |
| 10 | ## variables |
| 11 | these are plain non-sensitive values; use them directly without `§§secret(...)` |
| 12 | {{vars}} |
| 13 | {{endif}} |