Answer
User Secrets are a development-only feature for storing sensitive values (API keys, connection strings) outside the project tree.
- They are not checked into source control.
- They are only used for the Development environment.
- They override configuration from JSON files.
In production, secrets should come from environment variables, Azure Key Vault, or similar secure stores, not from JSON configuration files.