Per-adapter settings, read from this library's own otp_app.

Each adapter keeps its settings under its module name:

config :managoat_sandbox, Managoat.Sandbox.Sprites,
  token: System.get_env("SPRITES_TOKEN"),
  base_url: "https://api.sprites.dev",
  timeout_ms: 30_000

config :managoat_sandbox, Managoat.Sandbox.E2B, api_key: ..., template: "base"
config :managoat_sandbox, Managoat.Sandbox.Daytona, api_key: ..., snapshot: nil
config :managoat_sandbox, Managoat.Sandbox.Retry, base_ms: 250

The host application decides where a value comes from (an environment variable, a secrets store); the library reads nothing but :managoat_sandbox. A key set to nil counts as unset and yields the default, so a host may write every key unconditionally from its environment.