addSecrets method
Merges secrets into the injected map at runtime; later exec calls
see them. Per-call ShellExecOptions.env entries still win over the
injected secrets.
Implementation
void addSecrets(Map<String, String> secrets) {
_secrets.addAll(secrets);
}