Staging and production share an artifact but use different API endpoints and secrets. Which configuration practice supports both repeatability and isolation?

1. Bake every environment secret into the same public release artifact.
2. Supply controlled environment-specific settings through managed configuration and protected secret retrieval.
3. Let each host manually edit untracked configuration after deployment.
4. Use test credentials in production because the application code is identical.