Prepare an owner-authenticated secret entry link

Deploy scope. Send only deployment_id and variable_name, or project_id with optional environment_id and variable_name. Never a secret value. Links expire after ten minutes, require the same account owner login and can be consumed once. Stored values apply on the next deployment. This form does not scan or protect secrets embedded in YAML, Dockerfile contents, source code or free text. Never paste such values into chat or tool arguments; rotate any value already disclosed.