Environment variable secret provider — reads secrets from process env. Used for testing and local development.