Investigate if we have a way to programmatically update settings.php

That wouldn't be good practice. Just store values in config as any other module, if people want to override stuff in settings.php they still can:

$config['mollie.settings']['live_key'] = $_ENV['MOLLIE_LIVE_KEY'] ?? '';

Or they can use the Key module → to store sensitive config values elsewhere.