better way to handle env vars

[bap2pecs]

e1b1399

the way to use a combination of .env/sed/build args feels a bit cumbersome and error-prone

is there a better way to do it?

p.s. also let's avoid pushing directly to main branch next time :)