Handle API keys, OAuth tokens, database credentials, and other secrets in code without leaking them. Covers env vars, secret managers, rotation, and what to do when a secret leaks. Use on every project — secrets are a foundation, not a feature.