Bootstrap secrets before configuration loading

internal/config/config.go

@@ -23,7 +23,6 @@ type PipelineConfig struct {
 	Spool        SpoolConfig        `yaml:"spool" json:"spool"`
 	Cache        CacheConfig        `yaml:"cache" json:"cache"`
 	Publish      *PublishConfig     `yaml:"publish" json:"publish"`
-	Secrets      *SecretsConfig     `yaml:"secrets" json:"secrets"`
 	WhisperX     WhisperXConfig     `yaml:"whisperx" json:"whisperx"`
 	Seriatim     SeriatimConfig     `yaml:"seriatim" json:"seriatim"`
 	Audita       AuditaConfig       `yaml:"audita" json:"audita"`
@@ -84,11 +83,6 @@ type WorkspaceConfig struct {
 	CleanupAfterPublish bool   `yaml:"cleanup_after_publish" json:"cleanup_after_publish"`
 }
 
-// SecretsConfig configures optional local filesystem secret loading.
-type SecretsConfig struct {
-	EnvDir string `yaml:"env_dir" json:"env_dir"`
-}
-
 // StorageConfig configures storage backends and related parameters.
 type StorageConfig struct {
 	Backend string           `yaml:"backend" json:"backend"`