Brian Majewski e0474f3ce9 feat: 'file' external type — whole-file sync for .secrets-files (EGB-652) ... Built for the Beacon Android upload keystore: binary files outside the project root can now ride the encrypted store. - manifest: 'file <path>' (no keys; keys present = rejected loudly) - push: encrypts the file verbatim (age is binary-safe) - pull: restores next to target (atomic same-fs mv), mode 600, TOCTOU symlink recheck, divergent existing target backed up to .secrets-bak - _validate_external_target_path parameterized by type (basename restriction stays gradle-properties-only; $HOME/../symlink rails apply to both) - README/help/CLAUDE docs + 7 bats tests (133/133 pass)		2026-06-07 06:43:45 -07:00
..
secrets.bats	feat: 'file' external type — whole-file sync for .secrets-files (EGB-652)	2026-06-07 06:43:45 -07:00
test_helper.bash	v0.1.0.0 feat: multi-store support (EGB-281) (#1)	2026-05-09 14:30:28 -07:00