Stop Putting Secrets in Your Repo. Seriously.
OK. We've all been there. You're setting up a new microservice, you need a database connection string, a Keycloak client secret, an OCIR auth token — and before you know it, you're copy-pasting credentials into a .tfvars file and telling yourself "I'll fix this later". Later never comes. Until it does …