TIL how to access secrets stored in 1Password from CLI scripts, e.g. to populate an environment variable using an API key stashed in my password manager