In the .kamal/secrets, you could try to copy/paste the command that you're using to set the POSTGRES_PASSWORD to make sure that it's returning the expected value.