Stop Putting Secrets in process.env: Encrypt Env Vars with AWS KMS

This post starts with the production problem we hit in late 2025, the critical security vulnerability in React Server Components and Next.js (CVE-2025-66478). Then it explains the library I built in r