chore(creds): encrypted secrets [agent NK-WP-0005]

sso-mfa/bootstrap/creds-state.yaml

@@ -7,8 +7,8 @@ schema_version: 2
 agent_mode: true               # NK-WP-0005: fully automated
 
 # Phase tracking
-age_key_present: false         # ~/.config/sops/age/keys.txt exists
-secrets_generated: false       # gen-secrets.sh ran successfully
+age_key_present: true
+secrets_generated: true
 ops_bundle_created: false      # age-encrypted bundle created
 ops_bundle_location: null      # path or storage hint