Secrets in a public repo, safely
Set up declarative SOPS-based secret management shared across 4 machines, each decrypting with its own age key, stored in a public GitHub repo without leaking secrets.
The full write-up comes out of the interview: why, how, what broke, what it taught me, with pictures and links to the config.
