Secrets

Method	Path	Purpose
GET	/deploy/secrets	Secret names
PATCH	/deploy/secrets/:key	Set a secret with { "value": "..." }
DELETE	/deploy/secrets/:key	Remove a secret

Values are write-only: reading lists keys, never contents.