cleanup: archive stale secrets/ + secrets-issuance/, add Infisical bootstrap script, update SOPS paths to archive/

cmd/oikos/main.go

@@ -299,7 +299,7 @@ func runSecret(ctx context.Context, cfg config.Config) {
 	sub := os.Args[2]
 	secretsDir := cfg.SecretsDir
 	if secretsDir == "" {
-		secretsDir = "secrets"
+		secretsDir = "archive/secrets-sops-backup"
 	}
 	sopsBackend := secrets.NewSOPSBackend(secretsDir)