Implement app deployment improvements

tools/check-sops.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SOPS_SENTINEL="${SOPS_SENTINEL:-helm/gitea-values.sops.yaml}"
+SOPS_AGE_KEY_FILE="${SOPS_AGE_KEY_FILE:-$HOME/.config/sops/age/keys.txt}"
+
+if ! command -v sops >/dev/null 2>&1; then
+  echo "ERROR: sops is not installed" >&2
+  exit 1
+fi
+
+if [[ ! -s "$SOPS_AGE_KEY_FILE" ]]; then
+  echo "ERROR: SOPS age key file is missing or empty: $SOPS_AGE_KEY_FILE" >&2
+  echo "Place the operator age identity there, or set SOPS_AGE_KEY_FILE to its path." >&2
+  exit 1
+fi
+
+if [[ ! -f "$SOPS_SENTINEL" ]]; then
+  echo "ERROR: sentinel file does not exist: $SOPS_SENTINEL" >&2
+  exit 1
+fi
+
+sops -d "$SOPS_SENTINEL" >/dev/null
+echo "ok: decrypted $SOPS_SENTINEL with $SOPS_AGE_KEY_FILE"