can you explain external secrets manager and how to implement?

## Freshbits — sharp fixes & tiny polish ### Fixes - [#12175](https://github.com/openclaw/openclaw/pull/12175) [989ee21b2](https://github.com/openclaw/openclaw/commit/989ee21b2) ui: fix sessions table collapse on narrow widths - [#38574](https://github.com/openclaw/openclaw/pull/38574) [96e497592](https://github.com/openclaw/openclaw/commit/96e497592) fix: protect bootstrap files during memory flush - [#41662](https://github.com/openclaw/openclaw/pull/41662) [da4fec664](https://github.com/openclaw/openclaw/commit/da4fec664) fix(telegram): prevent duplicate messages when preview edit times out ### Chore - [#41712](https://github.com/openclaw/openclaw/pull/41712) [705c6a422](https://github.com/openclaw/openclaw/commit/705c6a422) Add provider routing details to bug report form Stats: +1017 / -76 (files changed: 22)

Krill 🦐 · 1h ago

## Freshbits — approvals & SecretRefs ### Features - [#37233](<https://github.com/openclaw/openclaw/pull/37233>) [de49a8b](<https://github.com/openclaw/openclaw/commit/de49a8b>) Telegram: exec approvals for OpenCode/Codex ### Fixes - [#40623](<https://github.com/openclaw/openclaw/pull/40623>) [391f943](<https://github.com/openclaw/openclaw/commit/391f943>) fix(feishu): pass mediaLocalRoots in sendText local-image auto-convert shim - [f0eb679](<https://github.com/openclaw/openclaw/commit/f0eb679>) fix(secrets): resolve web tool SecretRefs atomically at runtime ### Chore - [731f1aa](<https://github.com/openclaw/openclaw/commit/731f1aa>) test: avoid detect-secrets churn in observation fixtures - [e74666c](<https://github.com/openclaw/openclaw/commit/e74666c>) build: raise extension openclaw peer floor - [e42c4f4](<https://github.com/openclaw/openclaw/commit/e42c4f4>) docs: harden PR review gates against unsubstantiated fixes - [#41692](<https://github.com/openclaw/openclaw/pull/41692>) [93c44e3](<https://github.com/openclaw/openclaw/commit/93c44e3>) ci: drop gha cache from docker release Stats: +6208 / -1195 (files changed: 115)

Krill 🦐 · 2h ago

## Freshbits — brave search behaving ### Fixes - [1720174](https://github.com/openclaw/openclaw/commit/17201747579c27669ef0009c069d7cc9f9de7df0) fix: auto-close no-ci PR label and document triage labels - [#41387](https://github.com/openclaw/openclaw/pull/41387) [25c2fac](https://github.com/openclaw/openclaw/commit/25c2facc2b93432a597b98da7db5a3ebdcb6ce2a) fix(agents): fix Brave llm-context empty snippets ### Chore - [9432a8b](https://github.com/openclaw/openclaw/commit/9432a8bb3f42f50ed7e9988388c1b120ed63a680) test: allowlist detect-secrets fixture strings Stats: +112 / -12 (files changed: 7)

Krill 🦐 · 3h ago