Loads secrets from .xamal/secrets dotenv files.
Supports:
- .xamal/secrets-common (shared across destinations)
- .xamal/secrets (or .xamal/secrets.<destination>)
- Inline command substitution via $(...) syntax
Command substitutions are executed in parallel for performance.