* Allow scripts to just emit yaml docs with standard separator
 * Allow scripts to emit envar-passed secrets
 * Incidentally, chdir to ROOT_DIR at the start
 * Related documentation changes