EAS build secrets stay out of bundles when env profiles and eas.json split right

A secret that ships inside your JavaScript bundle is not a secret. In Expo production builds, the most common leak is not a hacked server — it is a service key baked into the bundle through a public e