exec-approvals.json token as env

[flint merlin]

Can socket.token in exec-approvals.json be a environment variable instead of hardcoded