pub fn format_env(secrets: &HashMap<String, String>) -> String
KEY=VALUE per line (POSIX env assign syntax).