See https://github.com/agoose77/binder-secrets-demo
This spike runs an egress command (cp) inside the built R2D container inside an init container. A secondary init container runs sops to decrypt this secret. Finally, we mount the decrypted secret into the actual notebook container.
This is safer than simply invoking sops in notebook container, because the private sops key is never exposed to the user code.