- .sops.yaml: Rotate keys, narrow path_regex to secrets. - sops.nix: Init module, init `sops-nix` script. - configuration.nix: Add sops-nix to desktop configuration.
