Secrets scope for finer-grained access control

There should be a secrets scope parameter to allow finer-grained access control so teams can restrict secrets visibility to specific contexts, projects, or users instead of using only coarse-grained scopes.