Allow the YAML config file to contain ENV variables

Because committing secrets (even “public” ones) is bad.