I am trying to pass env vars to the agent where values come from 1Password. If it was something like gateway password I would define a 1Password secret provider and use a SecretRef but that does not seem to be supported for env.var block in openclaw.json. Should I just handle the export that invokes op cli in .bashrc and do env.shellEnv from config? Thank you