Encrypt Your .env with One Command: The secret-keystore CLI

Part 2 of 3 on @faizahmed/secret-keystore. Part 1 covered the threat model; this part is pure hands-on. By the end you'll have an encrypted .env and know every command that touches it. Step 0: a KMS