let _ZotSecrets = {
  s3_access_key | String
                | doc "S3/object-storage access key for the registry storage backend",
  s3_secret_key | String
                | doc "S3/object-storage secret key",
  htpasswd      | String
                | doc "htpasswd file content (bcrypt hashes) for registry auth",
  admin_pass    | String
                | doc "Plaintext password for the admin user — used for API operations (cosign trust upload, etc.)",
} in

{
  ZotSecrets = _ZotSecrets,
}