Managing Secrets in a Hosted MCP Deploy: Environment Variables vs Hardcoded Config

Quick answer: In a hosted MCP deployment, secrets belong in the platform's environment variable store or a dedicated secret manager, never in the tool configuration, the JSON the server returns, or th