Credentials
Environment variables the agents need that your repository does not carry — API keys, base URLs, signing secrets. A task that needs one is held until it is here, rather than started and interrupted partway through.
Add a credential
Use the exact environment-variable name the code will read, for example STRIPE_SECRET_KEY.