Support .secrets/kogus/<env>/ when flat .secrets/<env> is absent for deploy-by-script-to. Made-with: Cursor