Status: IN
The Cloud Run service account needs `roles/secretmanager.secretAccessor` on each referenced secret, verified at deployment time.
Source: entries/2026/03/11/cloudrun-secrets.md
JSON