A container requires runtime configuration that differs by environment. Which approach is appropriate?

1. Inject controlled configuration and secret references rather than rebuilding untracked images for each environment.
2. Edit a running container manually as the deployment record.
3. Store all configuration only in a developer's shell history.
4. Embed production credentials in every image layer.