Secrets that live in git - encrypted, no Vault, no sidecar

Why a secret manager is a circular dependency for an orchestrator, and how age + SOPS let secrets live encrypted in your GitOps repo.