PS appsettings.secrets.json out of the box is only applied if ASPNETCORE_ENVIRONMENT is Development.. (which on a production box hopefully not)
Though equally could have anyone of a few mechanisms overriding, like azure_appservice → configuration → environment vars… Or a keyVault etc…