pub async fn run_secrets_command(
action: SecretsAction,
config_override: Option<PathBuf>,
format: OutputFormat,
) -> Result<()>Expand description
Dispatcher one-shot de secrets status|init|reencrypt.
Secrets primary-key status/init/reencrypt.
Workload: local crypto + disk (not multi-host SSH). Sequential justified: single key file / single config rewrite; Mutex in secrets layer.