environments

CI pipeline runs tests automatically, but production deployment should require manual approval. Want automated staging deploy on merge to main, but production needs a human sign-off before deploying.

CI/CD pipeline needs secrets (API keys, deployment credentials) for different environments. Using repository-level secrets means production keys are accessible in all workflows including untrusted PRs...