# KNELIAC consumes no env secrets directly: Ansible vault secrets resolve
# via ~/.creds refs at runtime (see AGENTS.md secrets rule). Copy this file
# for local overrides if a playbook needs an env knob.