formae.SecretValue so their values are hashed at rest end-to-end (previously stored in cleartext on the read/actual-state path). Covers the value field on GHA::Environment::Secret, GHA::Org::Secret, and GHA::Repo::Secret. Requires a formae agent on the matching release; minFormaeVersion is bumped to 0.88.0.sudo formae plugin install gha on the host that runs the formae agent.