diff --git a/.sops.yaml b/.sops.yaml
index 02668f8..db10937 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -23,7 +23,8 @@ creation_rules:
     age: >-
       age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6,
       age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0,
-      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
+      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
+      age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
 
   - path_regex: ^secrets/gitea-pat\.yaml$
     # Write-scoped Gitea PAT (dtoro user). Same recipient list as hello.yaml
@@ -32,7 +33,8 @@ creation_rules:
     age: >-
       age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6,
       age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0,
-      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
+      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
+      age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
 
   - path_regex: ^secrets/gitea-tokens\.yaml$
     # Workstations only.
diff --git a/secrets/gitea-pat.yaml b/secrets/gitea-pat.yaml
index 7c6a8c2..a865c08 100644
--- a/secrets/gitea-pat.yaml
+++ b/secrets/gitea-pat.yaml
@@ -13,29 +13,38 @@ sops:
         - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBad3NuaC96UFNSTG1TNXBk
-            WHl3VzVYTW5OSk9pTVZLamFzcElyRG5FTmxVCnpoVmJrOTByalpZcUFDNElnZGpr
-            dkh0Qkg0WE5XOGlac3lCTFFHcHU3QkkKLS0tIGVuSWUvUDArbVZQWmEyR2Vid1hF
-            Skh0TUZmcUREcGVUdDZoUTdYWlVGNFEKKORouhN77GqWG8FADHQRl6u3WAuaEqpi
-            nGK+gP4pfpz7mOeQxQmZT8cN1iIBMX6Tz/jIkqtc98WKGYP3Zh2mlQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNkRINHhiTlF1QjhxZjBM
+            bVBWUXp0aXJpZldxV01XcXlWL1NvWFI5VnhrCnIwWG5MR2FhaStpa1dUTE45bE9K
+            aGdvQmdodkk1ZzVkTE1SUk8xNHhsNU0KLS0tIGtwTEx5NUhBZTE2UWRoMlBzWU5D
+            WFhoRmRPL2tGUjFQamRLeTU4NWJpQVkK0fp2Le/3DG/aEQdq/T/Y6iYTmJAvVM7J
+            h6hKRW4tSwMxp/ibOKSCl9GW4SFOqmW9koJs9OJ67HjgmIopkXvioA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuS2RpZi9vRjBHemFUeE9V
-            WUREOEQzRnVxY2FpY0Evc2RxMXFzRDNVbkdNCnZzNmRvZ2V5NXBONDd6Q3hjNUdz
-            dzgwaFNic3ZvZSsxUDV2RlFabmwxYUUKLS0tIGd1aU9Tcm56Y2taYko2YXFSTThW
-            d2VnSGt1citxOUMzQXdqQTBtNWZ4UUEKj8C4w9TzMd0dVIddjP/+g1JTRg+Qjfjs
-            DK+xIvkg6iUh0NKak9/MY74Bv41KCcdU30FObYgRD6h8E98AhE+Y8Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRnZFd0RHV0RlNUxiVElr
+            YWdZTUFYMmFpSFFFelhiRllFWG50UnNuQ1NnCjA5emVCZTNPL2dsR3NLZFg0L2pB
+            NTlmRkZxNW1nYU0zTDhLVTZrcitFNmsKLS0tIHNuU1dKNzlPVlBCeWFVNU9ranZR
+            OXk3MGNjMTUrT3BBb0t0d0g2Z21sck0K5liL8QwW48RAkUZXLnPzx5rnuWm//At8
+            5eM9/ECKHhcIr0RX3yms+t3zmeSN3JutkzyX9XB+vnc9H3jPo64dRQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQVXFZOWsyZVQwclNHeGwz
-            MjA0QnVZUE9vSWM2eStVSVZ5eDhkVU81Y0hRCnhmMDViRmFMVUlob1UrK2ZySFh4
-            T0NLOFlHOERqY3dOeE4zbTFQeEVHOUkKLS0tIElLYlBZVWFxN1E0NGtVc093Ty9l
-            UkRqS0VMdFI3bnl4Ylp1WlZ5c3JyYWMKlo7g8aWh3Ry0cSU7W5zeS8YELjwK7tlW
-            0OSsDSjcnlNnsBLfKF3loJS8ZIUwNBJ/0eZ4NvPPtepLR6crgoH7+Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnemdGaWt0c0FBa0swRjVC
+            dDJUcjBpY3h3OEhBTlhsdHpxcnZEYVlQbmxBCkQ5ZCtFSUh3RFR5RTVDOVdlVkpG
+            Wm9nSGl3ZEVqa1VISUFWL0gyaUEzR1EKLS0tIHZDZDRzcGtDNzZkZFQ0eWtaYndB
+            SUVvbkk1T0VkY0I2ampPUEI1U2ZmazAKJKQs0olvC+5CZCwWOD1v+cta1iPK6w6C
+            TQE3d/R3B7+7e/RTZSNDv8gsznh98n8s5WIU/PhTvKruHsy9c3FAyA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOZmpLMmE1aFMxdCtSUm1O
+            UXAxekpyS2E5dHM4S0h3c2NjRXhZK2JFTmpNCkhRWXpuSmJPc25kSGNrTUFEVkdW
+            WUtuOHhCRndiTEJ5YjFwWVFmbTR3amcKLS0tIDV5dmE3U0ZqSzd0a1NnSVBvSi8x
+            a3d4TUNXcEJYNEZ2L0t3VDltSVNNbkEK4AzxY7qsOPvSh1XrxYvW5w1RFSvuU0ig
+            FjOVah9yx/v1yVWP8jafH8ond8dBfT/T86Zo1KIM/xpMTH5c3be6vA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-05-20T16:24:18Z"
     mac: ENC[AES256_GCM,data:d3qcjEqpPIFeut634ImvISJLdit0MQWcdFYomrsqriqJ0NUKdyq3XCk85+vvPvDWikB4WEApk6HMXssSY8mhDci95q5Ssmr+JRAhLebMZjs9yXUf9A7vXpNFswmdldu3CKBiDrhm2GE08qUfsCkcf3jjihEqsfHhxMuWSd5fZpU=,iv:VZgvZ3bBArRChgRX38U6/43XoX5aTnts7Kd4S9spBPk=,tag:/5oOw5yvulvFT6KXv2zj0g==,type:str]
diff --git a/secrets/hello.yaml b/secrets/hello.yaml
index 6842673..a02a486 100644
--- a/secrets/hello.yaml
+++ b/secrets/hello.yaml
@@ -9,29 +9,38 @@ sops:
         - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQXlnbG4zZlNTbDduSENL
-            b295UkVWcUpXMkxPSS9WTW9TRCs0aWx0WXg0ClpJVE9KU1ZRYVdtTFFtMktkdnBB
-            NFFTYjIxL0F2M3M4a2VBRXVYYWJKbE0KLS0tIFpPTFY5QjVDWUw2ODcyQWx0NmpP
-            eGJRbHBqWTgvVnZCN0Mrc29pblpieUkKDWqdmZMPvFC2Eaql9KHG19Pi0ek4/cKE
-            bewjSZ/7GZ/ov3xBFWjBVfBepeWnwwrd1NgBKPckm6wMxDPZU5gTag==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6a25WS2tqQUQ4K3UybFpB
+            L1MrR3lIWkRsVWVZNm12NzJEdXpGNHBZSDFvCjZoVlQ5Q0FaemlXT2hZT3U3cVdW
+            cHZSd3llMUtZVnRwZjE5cUhnaGVTTWsKLS0tIGdwanhvVmhMZEhxSkg4MklDckNB
+            VWNJR2FnSUh0WDNKWUR1VktWTG5aQU0KI/OMhJjc0g/LSI+NQiG5QDpHjZjZwrK9
+            kSJTKZ0jyqSc1/uiSuxDkj56XU4WjlI5qSibkRFk0g+ep20EPRBk7Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnWENBRzR5UTNkdStOOVps
-            QjVreEZqZWZmcmxMZEFJbEtUOGNkYlZXOGlZCm81OE9RK1ljTVJ0K0tHM2xzaEFq
-            Um1zR1loTmVDVUxyU0VPSXo1YzNkczQKLS0tIHBnR1N1dlhTQ0pnNTU1a3FIaE9l
-            dHJxTXRXWWo2Njd6eVJYeUc4RXR0YVkKGtia6ZGBXmNTzBTNA4fVvIT0h+2egC6I
-            mzilX73imv5ytxbS88jvT8t/qeb8m5he4dybWx1FKaikKlkqRWCygg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4dkRtdlJmcHMva3g0S28x
+            QWQrWGxzb2RQSUErUzYvR2V0YjFSMG51YVhFCjdqdXQwcVp5SmlzNzRxU3hOZGtS
+            QmNBTFhwNXpmRkFZT2RaR3R6cXhRT00KLS0tIFY3cUlWK0g2RGpJN2t1SmtlTTVn
+            NlZ6UTRjNlVMMWg2K2pMdnhUdVlpYzAK/nLn0psqUxMsD5XCEiArB5+dQqahMA1f
+            SP9NzznMwsk1YwlFN94GGKxXge+sSWBHtUdqUOK104ZYzRZVnqduuw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmVmkydnptdWQyczVWeVNw
-            YkZsZUR0VzJjeGRnNG9VV1NWUWpPb0lRaDNBCnhxTExybG5OcVdic0lWUjM3dGNL
-            R2NqL2FxVjFOR1d4VnlFK0pMeFg2Y00KLS0tIFpEV1BWR05qd0dWbEJVSFo4cjRN
-            R0prZ0NyWjlJUzFYV2JwSnZmY2tBeGMKki3BOJlofZV759eKgqO3JJfJbZyygMqV
-            DmPcrwQUEXZcB5p9CRb2Y87utL0DdYJBvreiPGRLcEZxrK60RyhPEA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhSVRsZlF0QWI0Yi9Oc2Js
+            d3BRWTd1V0RsZFYyaDRuOGxCb2Q1bm5tczFNCkZBdGtWaHRqdVhUcHZNS3RyZWto
+            WWhpTlZEdktWOGRLT1l2WW1xL1pMTWsKLS0tIEJjSVdNRWRXWGcwaktJSVcrb2FR
+            cWVmeDh1MUhSb2JheUNOVFRqWmZ3L28KCi8qUt/4Ujv5POaGnp+Sumi4Khu7+mLs
+            PBbJ4U1WaWKGZFtjBqNMw2aHVe4h0AyXKGOVHt773EuvLqd2f8vxKQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCK1JZNXcyRGdKYU03eHFX
+            Z1dXdGtpL3dZMVV3QU9XbXF2RFFNS1BpdXgwCmNDa09mT0FmZk8xbG1oWW5UMnF5
+            YVRmRmtvaEg1Mnk0REdOV0lwR2sxcjgKLS0tIHlTUVoxaEthaXpieXFodTZ6ZFQ2
+            WjhqUzFza2NJdXk4YVpwWnlXRlVTK0kK6yheNVJcch4HXY7RteveEcINn1KlAPkw
+            ABTNVqSa3o9SEu6kN3iQf7zfuwNOB1GTmUjQixgHPYNEZPoPzXO0jw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-05-20T14:39:14Z"
     mac: ENC[AES256_GCM,data:CAoIW1sJkIbNoXMaVlXwfHdREzATNqDKpSN5ecaSiRARThB0/tcLNbkazXKyV1Rx5b+b3s+yCpBzwmNnH6ytaCzG5pKPcnfd6YJq7C5rm/EQHyaVGrPdBsSfqiz4yBXKClej//v3+qkD5Ls2PMppv5KmqigOKNQC/ot3ht2c7lM=,iv:eOmDDclksr9f9CDu6dJprSFwlWuoggzVFjyfqWf5Uhg=,tag:IU3sMlIi92ohM86zOIJdAg==,type:str]