Pass a build secret without baking it into a layer

docker build --secret id=composer_auth,src=./auth.json .

# RUN --mount=type=secret,id=composer_auth 
#     COMPOSER_AUTH="$(cat /run/secrets/composer_auth)" composer install