A deployment still needs a protected external API secret for an agent tool. Where should the secret be managed?

1. The model's display name
2. A supported secret store such as Key Vault with narrowly authorized retrieval
3. A source-control tag visible to all contributors
4. The public system prompt