pub fn resolve_passwords( expanded: &ExpandedManifest, ) -> Result<BTreeMap<String, String>>
Resolve password sources from environment variables for roles that declare them.