Keep host-specific secret injection in the maintained plugin layer instead of carrying a behavioral divergence in the OMP fork. Solves: Unwanted fork maintenance for MCP injection Tests: Reverts only drycode/oh-my-pi PR #1