Caddy {env.VARIABLE} placeholders in Caddyfile not expanded when using `sudo VAR=val caddy start` because caddy start forks a child process that loses the environment
gh CLI 2.x stores OAuth credentials in the OS keyring (libsecret/keychain), not in ~/.config/gh/hosts.yml. Bind-mounting the gh config directory into a Docker container gives the container the user/ho