A practical look at secret management on Linux and macOS: Keychain, pass, shell history, .env files, and the small operational decisions that eventually lead to leaked credentials.