0adf39c8a287057b09b0df72bcd38d6329d623fc
Issue #210: neither the SOPS age key nor ANSIBLE_VAULT_PASSWORD has a documented offline backup location. The age-key archive was previously bundled into the Phase 4 point-of-no-return checklist, blocking it on the reconcile/unseal soak for no reason — backing it up to pass is safe to do immediately since it only adds a copy. Also documents a pass location and verification procedure for the Ansible Vault password, which gates PBS and other Ansible-Vault-encrypted credentials and had no backup plan at all. Co-Authored-By: Claude Bot <claude-bot@renner.uno>
Description
No description provided
38 MiB