Logical name (e.g. 'STRIPE_KEY'). Set the value out-of-band with
secret set <key> and read it at runtime with getSecret('<key>').
Optionaloptions: ManagedValueOptionsA SecretValue marker — pass it into Hosting environment /
domain, or a pipeline's buildSecrets / connectionArn.
Reference a sensitive value stored in AWS Secrets Manager.