Pydantic Settings is just an object to hold the environment values. You don't need to change it (and pass the CI) if you just want to change the value of an environment variable

In one of my previous jobs, we have a complicated setup using puppet to generate secret files. It isn't the same complexity with environment variables. Nowadays many PAAS allow us to save secrets without hassle.