Secrets in Business Central Extensions: SecretText, IsolatedStorage, and Credential Leaks

Your Business Central extension successfully connects to an external API. Authentication works, requests are processed, and everything looks fine. But that doesn’t necessarily mean the API key is secure. Where is the credential stored? Can someone see it while debugging?…
