For the sake of logging what we talked about - I think we agreed on a single config file maintained in its own private repo that will be deployed to a known location. Producers and consumers will be responsible for including that file to get the necessary vars from it.