gitlab natively supports vault in ci yaml.
https://docs.gitlab.com/ee/ci/yaml/#secretsvault
https://docs.gitlab.com/ee/ci/secrets/
check detailed implementation of it and feasibility of using this secrets backend instead of kv
document if it's possible or not