- after dd, if ~/.config/homelab/<config>/age.txt exists, mount the FAT boot partition and drop it as sops-age.txt (mercury). Key stays off-repo + out of the store + out of the image; no manual mount step.
- after dd, if ~/.config/homelab/<config>/age.txt exists, mount the FAT boot partition and drop it as sops-age.txt (mercury). Key stays off-repo + out of the store + out of the image; no manual mount step.