Environment file with secrets such as metadata provider credentials (IGDB_CLIENT_ID, IGDB_CLIENT_SECRET, SCREENSCRAPER_USER, ...). ROMM_AUTH_SECRET_KEY may also be set here; when absent, one is generated and persisted under services.romm.dataDir.