# Docker run - secrets injected as -e flags
keyway docker run --rm alpine env
keyway docker --env production run -p 8080:8080 myapp:latest

# Docker compose run - secrets injected as -e flags
keyway docker compose run --rm test env

# Docker compose up - secrets injected via --env-file
keyway docker compose up -d

Behavior

| Command                    | Injection Method                     |
|----------------------------|--------------------------------------|
| docker run                 | -e KEY=VALUE flags before image name |
| docker compose run         | -e KEY=VALUE flags after run         |
| docker compose up/down/etc | Temporary --env-file                 |

Features

- User-provided -e flags take precedence over vault secrets
- Interactive environment selection when --env flag not provided
- Same authentication flow as other keyway commands

Affected Files

- internal/cmd/docker.go (new)
- internal/cmd/docker_test.go (new)
- internal/cmd/root.go (register command)