rock
e599c12f91
storage/minio-oidc is owned by the KeyRotation object iam/minio now, so its value leaves git. minio-creds and minio-user-ollama stay: they are the root console credential and an application key, and neither rotates through ZITADEL yet. The file keeps a header that says so, because a prune of the sops-secrets application would delete that Secret and the controller recreates it on the next rotation.