ExtractiveReader
* chore: migrate `ExtractiveReader` to use secret management * docs: add release notes