Security patch: suppress key echo, env var support, gosec/govulncheck CI