TIL: SST stores state and encrypted secrets in a backend

SST stores state, secrets, snapshots, and event logs in its configured backend. Secrets are AES-GCM encrypted before being written to S3 or Cloudflare R2.