[Feature Request] Better secret management

[xyntechx]

When defining our custom connector endpoints, the API key we input is stored as raw text in the JSON files. It is true that JSON doesn't have a concept of env vars, but I think it is important to not expose such sensitive data as raw text in these files, especially when people may want to create and push their own moonshot instance to remote repos :)