{{/* Secret disabled — all config via ConfigMap */}}