client-add: rclone (finalize age_pubkey + grant shared secrets)

secrets/gitea-pat.yaml

@@ -5,62 +5,76 @@ scopes:
     - ENC[AES256_GCM,data:/UG/8LQD21l/Ca0wfEodKw==,iv:f3tW1ZNLLkzE5Oy8acQ6GfyDvzEH3++kp8duBOI8+Is=,tag:IgfhvEaX9EGyPHhr6FSAjQ==,type:str]
 note: ENC[AES256_GCM,data:vRDjHXh5fYlhwJ4LyS/hcqMGdS+Z/D1W2oH6NaJak/XRUr+nFVQqcXSH/zUgqEBWNrMv6j8n2Ouxex/q2mr+p3Ds1jfThJTobX/MFqMkxvxk0TmB7ucui7CDa4mcVgSo3wyhcaba2o3erObByZ3o2uay3mmqzAUdo/wy2bCgQTkTG9/xqVSf3EYuR1j/A+SAzSvpsOORMNUjC5NRP1DUL+3hZkPXsfkXuy7sV6T2vF+oOrbEI0WxR8o4/JcF1B/4ezFAJ+f+nukCMz6eSCwur/wHffbcYa8mtD6BIRuV1pTd/Zob8arhe2ir19MB0fR27E3UkcCwyCkQ+QWuGzisvciCPtwR4JidH7xOpPW+4AK3vqEjmpEeMSWlyxbZadQFuSi8f3bPH+8eB2h/UFvT0BU6xw==,iv:r2dUnKyUWhyafIeDIjHOdqh+PNFzGtVZfcHc2TAhvvI=,tag:Cmg6esU4mQ8/9UbIQQL/gw==,type:str]
 sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
     age:
-        - enc: |
+        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2S0ZRV3BRSmhWaEViRDJG
-            RnhlS3NUZTd2N2dLL0ZQb1dGa09IUDIvUVZRCmVIN24zMnQ1ZUtpQnF1T3REL0ZM
-            WDBVbC9tWis0cnMwTFkrak9MS2duVXcKLS0tIDY1bHRMR0hiKzh2czVtalkxRito
-            VjNJci85VkkyWmhPdFIzOVA0TGxHUlEKRb9oG7s1l+qJx8zVN4vQ1qxwvsIhboid
-            8dcShpX3NIKYQH7dhQAM23StMp6eRNUGXB9eEkIGqlQJB3AirC0XKg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIa05CSXpkcUsvbFYxcnNM
+            b2o1ejFFRVdUaVhzYURPRm5oTnBxUXgwYWtVCjY4L3hvcy9NMHpDM1Q0WGJMZ3Mv
+            aXhVek5uWkIrdEI3cFl2N2NUUjc2ckkKLS0tIFpSRDZqeE5VM3ZsNGdYTHRWcUQw
+            QkhSSVZkVm05TEp1RmFNdXFydVhpQXMKgpF5MlP8wkOLkbCxozmtG+axD32rs/SA
+            Oc1Eo/ggRT54EGCFoMPITnzsC0ELqZOnOjpZi2FU/Vh1pEhBXCOwJA==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
-        - enc: |
+        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQ0NmSldIcGVpekMxUFgw
-            cWpNOHpHek43dXlUVDFOWmFkZTlvUmdGZ3hZCkFhYUVwcmRYblVNaEkySTZIMUtG
-            RGhEMmUweHFyMVhlV3BzYllxSkN1eTQKLS0tIDNsalJkZWR2U29LbHROWVNLOWRr
-            N1R4S2d5VjNUeWtXWkJlSXBTUExiTEUKKqvErCTKMuYFrndXRTGFaHCE4UKD5PsA
-            0X6xKiMTK/6tQAEpaK06zihYnEp8X+N9z0O4hxzZbtHywrBkMsxR8Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxeXFyQW8zb09QRm94M1da
+            ejBkbCtzMkQyaVF3RkxscWk1cDBiQW5SdmxrCjRCa1UvZ2VhQ3Rqb3pXcjN2d2dS
+            VlROVHh0ZnRWbGVhdDYvY0ZDWUUxNE0KLS0tIE9zT2VvZ2ZjWnBNYWxTaWtFVjkv
+            S3VIdUgydit1Wk9kMnd0ZDB5NE1iaVEKLvVToIX8zc6lXi0Ro59copkeCl19Nv3H
+            obbUoW6v7tVnM/Khiw0DhHzzhLbgLFfSm/e6h/8o4Wok8CSHvp35iQ==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
-        - enc: |
+        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGNy8wN3hQY1FJU09uek1P
-            N3p0Zm9LT1dZVmpQTGtDbEN4WGRTV21zUVQ4ClJQdWhzU0ZxbDllTHFtekthZnJz
-            WlZyN3NLc0thS3hkaUhML2oxcXM4U1UKLS0tIFUvSVFWb1dmdWJlZDhXVVlVcDl1
-            NERoUEZHdnF2MmhqS255M1ptMW9nYmsK8oEzGVaHg6TFg6lciRweWU3fMPJ6YCwE
-            KDX6I2Y6qbIJtTwhaYlgjBIZoQSVvRwkvLdi/q/WUPtXYtn++8bjrQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlMy9nek80M3k2cTNPQlRG
+            WE42aGtsWllkaHZjOFg2b3ROdmZuWUNLQXhBCmNZZC9mSXNkU2xLUnp3MDNVZ1hn
+            YTA5TzRHNHJMN0xqMDhhZGxxSytpZDQKLS0tIHVwdHNRczZaLzRrK3QyLy9qU0E2
+            anExUUFlRzdiY3dFbU5VMW83K2I0a1kKFaQVQH6mjh7I4r9UNk1Uvw2hyYnwLGSJ
+            Z9PxVOucYfODHoWMq1jWcW2vQQO5G8dWtE3S97yoqNVteAf8nmH4xw==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
-        - enc: |
+        - recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAySXZ4ZExlRkQrTmhwSG9O
-            SjZuREplSEN2OFArdFE1M2ZocnVYVkRKaGpRCnBML3ltNVpMV3NTdXNxd01hMGhh
-            KzN2SjhBdkVYRUlsY3BoV0tqYXM0TVkKLS0tIFR6blI4Y3Y5dlQ3alIzcUw5M2h6
-            bXphandFODVQbDhJUzdZOFBHZjBZNFEKxLLbNbd7WQm/+2vSoTH+HIOL3nASwlGH
-            bxoc47XhNXVnY2aeDsL96WOdE6pZearD++c7Da8zOcZUK/poKILWcw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDaHZmTzkrTjhETkttOWho
+            azcxb0lTNVd3aW5iZzBxUkNZQjE4T1EvblYwCnBSdFN3WFhBYWRFeTlSQk1MbkQx
+            bm9ORkJRbHhJLzJva1pvSDF0SU5pZlUKLS0tIEZLSmxBdmE0RHQ1Qk05MnBnUVlL
+            aWtDcTZHZ1BWWmtLNHEveEE2K3F0eVUKO5Yi/DEmFL5wJDL3XVFlRfWTjPTNVFKz
+            G6NPwO5qeC0kFCOZWtKU8+6f0m3tw2ZsNylntnCZbRScbshR9QhVEg==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age1z62ff2ak9zj5ctcvaxwyyhedwjvlwgm2dkn9nk3wrwk8fkavcpmsqwc2vs
-        - enc: |
+        - recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzOHFuNnFMT3U3dlZTVkVW
-            VVRLQkNPZEZ0S1hPSmdpdHJuU3dkUWt4eDNrCmRwTCtJUEZlSGNwYjUvVXRNRlBr
-            NFVoZ05HdS9ZRGcyRGo0dUl0RHdwN0kKLS0tIFFYc1VvOG5hNGp1bEx1ZW1IT1E0
-            bnRqNDRrQ202cnI1RHI0dkRqa3Rmb0EKj3NcVcTIa+rf2OFev3y+xmeQzV9BRkZN
-            4bXCPXNO1eNvA1bP8i8ha71X1KuIotWPiPssjEodREMyDMq7L+F24A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSkEvNm1NZFgxRlJaeVZu
+            TCs0L3c0UEpTWmlDRnV3QnkxUWYxTnFIZjJnCnlOMm5lOS9MbmJwekNoczZsZFFa
+            R3JKYWZoNjNLTnhscXp2UGVrOHBsUkUKLS0tIEx1K1lYODBuczllRkl5U0JTTGpC
+            RC9Mc2NyTUhPekJnY0VWSDVpZzlhVjgK1bFDQaqJf0Nz+IjTPPMgi5DxbW/ln5Po
+            SABlg3INzGh2pyAgOroBEKr0Dl2dU23/hX4uixP2YxkJRkbamU3+6w==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age1s07zs83ehtlg8jtwvr75ltc3c4cdlemfwjuxrwjtwkqxkl9tpggsyrzn2h
-        - enc: |
+        - recipient: age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
+          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4U0ZoWTVrZXpCYzZMTDN4
-            c1dkMTdEd0V4b1paUU4wMlo1eURESng3NERjCjJGaHdmeHhzKzNyeFVXVFRkUEVk
-            VG02eEtaUnBSdVhVUk9lWUFXZjFEYWcKLS0tIFVrU3M0b29tYlNBQWVXSjlLeENj
-            TWdSY3BLNFkxWXNVY1VFSWZQL1pKbzQKxXPpqmfwtHbr+0DTeG5dZX2ihj1Ogb61
-            3wscc5WFDlrR/Jv4xvx/jFYxPxQHQcEg6fnS+pxczO2jv+aBhrTiDw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQUE3RHhGS01SYzMrZ0lK
+            elR4UEQvT0w1anVjeHNKN1JERGxwcUoxc0c0CmNLVEFVMWFDdGNlM3VLcDFueDNa
+            SW10cWhlWk5KMWtYMnFXTmJYbFQ1RU0KLS0tIGNHVWloaEtIeEVoREMvT3lqT3dS
+            ejZwcVhWS1NmNVByRGY0ekM4V2lKQUEKOWxj1HmtSPoungbzek2Z0okRS59A2QwY
+            /zXoEXgIskP9Rjr4zf29cE4RYSYW2UVU4aeE9fVA3Y+NrylGi5I3ng==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1pwtdws2thdh7vzp2dzttl3zxgcs2tgpcsjsqgw3q04nyml4kvuqq467u4x
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzYWQ4RHpNWEpKNWpMRGll
+            blpTUWpmV1lOZ3lKdUwwL2o4TzNMY3lnV0NjCmRUNEQ2OU93QXdhRURveXY1bE5S
+            alAwNzVGRVZtaXg0TU9xclJZMGNvSlUKLS0tIEM1SmY3TUhkN0FRb1JUMDFKVndN
+            a0dIZlZ5ODZBMGtEZmxiTFRNUEdKQ1EKXYAaezVE0H1viKEo49D60i/zqHv8xZsg
+            8c4oVRGVW3wLzb4Dd4O2MvLpNpy1yRgd1pN+qUB/Pft2G3IwWWw3BA==
             -----END AGE ENCRYPTED FILE-----
-          recipient: age1rtwvdct6avjkr3cyxv3vue3vqx4d524fjfr3vk7xrnvyrylnry5sm54sn4
     lastmodified: "2026-05-20T16:24:18Z"
     mac: ENC[AES256_GCM,data:d3qcjEqpPIFeut634ImvISJLdit0MQWcdFYomrsqriqJ0NUKdyq3XCk85+vvPvDWikB4WEApk6HMXssSY8mhDci95q5Ssmr+JRAhLebMZjs9yXUf9A7vXpNFswmdldu3CKBiDrhm2GE08qUfsCkcf3jjihEqsfHhxMuWSd5fZpU=,iv:VZgvZ3bBArRChgRX38U6/43XoX5aTnts7Kd4S9spBPk=,tag:/5oOw5yvulvFT6KXv2zj0g==,type:str]
+    pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.4