`compose.one` (and likely other read endpoints) return env vars in plaintext, leaking secrets into LLM context

[milkyskies]

The compose-one MCP tool returns the full env field as a plaintext string in its response payload, including any secrets stored there (API keys, admin passwords, DB credentials, registration tokens, etc.).

Example response shape:

{
  "data": {
    "composeId": "...",
    "env": "POSTGRES_PASSWORD=hunter2\nADMIN_PASSWORD=...\nOPENAI_API_KEY=sk-...",
    "composeFile": "...",
    ...
  }
}