Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.