Secrets

ductape secrets list
ductape secrets create -f '{"key":"API_KEY","value":"..."}'
ductape secrets get --key API_KEY
ductape secrets update --key API_KEY -f patch.json
ductape secrets delete --key API_KEY

Workspace-scoped via sdk-proxy secrets module.