new script to update all sops secrets in a directory

also, rename secrets scripts to be grouped

pkgs/sane-scripts/src/bin/sane-secrets-update-keys

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+# after modifying .sops.yaml, run this to re-encode all secrets to the new keys
+# pass the base directory (under which *everything* is a secret) as argument
+for i in $1/**/*
+do
+	yes | sops updatekeys "$i"
+done