Expand description
SOPS-decrypt primitive. Shells out to the system sops binary — no
point re-implementing age/PGP in-process when the CLI is a one-liner
and all the surrounding tooling already assumes it.
(sops-extract PATH EXPR) → string
EXPR uses sops’ JSON-path syntax: ["cloudflare"]["api-token"].