show global & org secrets in repo secrets tab, and grey out if overwritten by an repo secret. this way you have better oversight over them.