Wire local NVD key loading

scripts/load-local-env.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+set -euo pipefail
+
+DEFAULT_ENV_FILE="$HOME/.config/websafe/env.sh"
+WEBSAFE_ENV_FILE="${WEBSAFE_ENV_FILE:-$DEFAULT_ENV_FILE}"
+
+if [[ -f "$WEBSAFE_ENV_FILE" ]]; then
+  # Export variables defined in the local secrets file for child processes.
+  set -a
+  # shellcheck disable=SC1090
+  source "$WEBSAFE_ENV_FILE"
+  set +a
+fi