[Feature Request] Strict mode

[philmillman]

Description

It would be good to have a "strict" or "high security" mode that disallows all @sensitive values on disk, even in non-tracked env files.

Motivation

Allows policy enforcement for high security orgs and certain regulatory environments.

Proposed Solution

Validation check in load and run that will give a validation error if any @sensitive values are present on disk.

Alternatives

No response

Additional Information

Some challenges:

• a user can change the local copy of their schema