Baked Into the Image vs. Injected at Runtime
Same value, two very different change-cost profiles.
Change a value
(baked into image)
Build → review → redeploy every instance
Full release cycle for a one-line change
Change a value
(runtime config)
Update value → agent picks it up, logged & attributable
No new artifact, no coordination — still audited