I remember a thread (and cannot find it) in which someone reported that Ansible was reading variables from an old temp file that their text editor had left in group_vars. I can’t find the thread. If it were vim, the filename might be something like .vault.yml.swp. Maybe you could check for such files with a command like
find . -name "*vault*"
(run from the root of your Trellis project)