Discover the most common secrets management mistakes in non-prod environments and how to fix them using scoped tokens, runtime injection, and tools like Doppler.