is a secrets-provider-container a good idea?
There is probably a better way if you are working with Google Cloud Run.  I have not tried this but I see that they have &quot;Secret Manager&quot; that you can use.  They also mention a project Berglas that can be used to store secrets in GCS cloud storage.
In my personal experience, it find it best to leverage widely adopted solutions and avoid creating a unique solution for security.  Getting it right is non trivial and it is less code you have to support.
This FAQ has doc links to the solutions I mentioned.  https://github.com/ahmetb/cloud-run-faq#how-to-configure-secrets-for-cloud-run-applications