Store sensitive env vars without NEXT_PUBLIC_ prefix | BeforeMerge Rules | BeforeMerge