Hi everyone! I'm using Infisical OIDC in GitHub Actions (method: oidc) and it works perfectly during Docker image build - secrets are correctly injected and visible during pnpm build. My question: what's the cleanest / most recommended way to make the same secrets available at runtime inside a container running in Portainer on a VM? What I'd like to avoid: - Manually entering variables in Portainer UI or docker-compose.yml - Storing a Service Token in compose or on the VM - Rebuilding the image every time a secret changes Is there any official / recommended pattern for runtime secret injection from Infisical into an already built container (without rebuild)? For example some sidecar, entrypoint wrapper, or a way to pass the OIDC context/token into the container at startup? Current stack: Next.js standalone, multi-arch image (amd64 + arm64), OCI VM (ARM64), Portainer, docker compose + watchtower for auto-updates. Thanks a lot for any ideas or best practices!