Every secret name this env announces in exec envs: the live values' names plus the host-registered roster, sorted.
List<String> get secretNames { final names = {..._knownNames, ..._secrets.keys}.toList()..sort(); return names; }