0.27.2 — seed-secrets runs on host, not container

scripts/deploy.sh

@@ -58,7 +58,9 @@ done
 
 # 7. Seed secrets into Infisical (idempotent)
 echo "[7/7] seed secrets"
-docker compose exec -T api oikos secret list > /dev/null 2>&1 && \
-    docker compose cp scripts/seed-secrets.sh api:/opt/oikos/scripts/seed-secrets.sh 2>/dev/null && \
-    docker compose exec -T api /opt/oikos/scripts/seed-secrets.sh || \
-    echo "WARNING: secret seeding skipped (infisical not reachable)"
+if [ -f "$REPO_DIR/scripts/seed-secrets.sh" ]; then
+    REPO_DIR="$REPO_DIR" sh "$REPO_DIR/scripts/seed-secrets.sh" || \
+        echo "WARNING: secret seeding failed"
+else
+    echo "SKIP: seed-secrets.sh not found"
+fi