fix: split secrets into individual encrypted files for KSOPS compatibility

KSOPS cannot handle multi-document YAML files; each secret needs its own
encrypted file. Updated ksops-generator.yaml to reference all 7 secrets.

manifest/overlays/production/repo-creds-external.enc.yaml

@@ -0,0 +1,28 @@
+apiVersion: ENC[AES256_GCM,data:1wE=,iv:ficrVUo+uP8C5J/iXKy8+h1O26XVRDOI+ZYK0+LFbnY=,tag:Nv6smBHA9KXzCV5V/xMhdA==,type:str]
+kind: ENC[AES256_GCM,data:ROFGmJxz,iv:pT/eVSwFvFU7Yh7jt9KsT9ZUXPgt2YI8w0miXjqg9oo=,tag:qIv3AetT6B/68sP52OHXOQ==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:492q0gdP9XAl01Xpdr0JSRWqRBo/4UTuRQ==,iv:t0dtGisAlzR6REQEagDs7WKvNkTFxvd69MhxKE1wsUo=,tag:WSlH05eYMLg1vXahnGvxsw==,type:str]
+    namespace: ENC[AES256_GCM,data:eXTVlw6u,iv:xfaxh28LpCSIAplxZ8epORxk0jbkkceYMNs5w9ojiYU=,tag:zR/OVbIyJzlu9ZtYaIyfTw==,type:str]
+    labels:
+        argocd.argoproj.io/secret-type: ENC[AES256_GCM,data:2vzzPNyKXYnPxQ==,iv:JIzBGW2vIK7v507zFSmfHsQigZsw8ZQwBWzsQfqEvqc=,tag:qt8Kp8kB5LGxE+TDNNnVSQ==,type:str]
+type: ENC[AES256_GCM,data:J7FpF6wc,iv:GZYqsHm7NYGVYwDEzrFI0Py5xjGQ9IIRm4Ms5FYZIqM=,tag:WaCIIDDK8K9fKhVw/CWuqA==,type:str]
+stringData:
+    url: ENC[AES256_GCM,data:NDdACSJI+bnYwZuVXbfuCDpoyrX6jw9WMcrd,iv:IYQCC5G7/uPqPPeusrwcEjNpD3M4zrFcyecMejwazu0=,tag:1gy+wmjSKmcfhZZEVcWdVw==,type:str]
+    type: ENC[AES256_GCM,data:Yssu,iv:s/VoPna0rykWa0Yotl277UYx+SQfTOl2MQocQDdXaiY=,tag:m7yYbCGFiTAsSRf1nD/89w==,type:str]
+    username: ENC[AES256_GCM,data:RsZCBzA1,iv:hFw9SrT9gYdw6RuAdDMKo29hLe0iSPsuYoOWRArMiE0=,tag:PIvkBrr2OqxWabvkNiAYeg==,type:str]
+    password: ENC[AES256_GCM,data:E6xMEqrMOOdLIOwsUPWzkIMRpat+xpjtbhVvhhquWZ+Wz9c8+PUlig==,iv:8brkx0qLi8T+cevk0VnT7IF+WHNJl7W7bU7QbSFNZP4=,tag:KU/3XX/SpytiR20z2a89Ig==,type:str]
+sops:
+    age:
+        - recipient: age1s0gzgh8c00tgnkgxrqyz2nu0k56xvc9ev3jdenkmu90egux9xfmsxvvj43
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPdmRDdFFNby9iV2lFVUhJ
+            THEzOElYRlpTSVNtWldKSzhYTmJRdnorOFZJCmIzSVgyZiszWURMckxrL3BBLzAx
+            djhpL0o5V2F5c0ZjaHQ1TFlqYm5pZGcKLS0tIE9RWXJaUXdKK2ptdlJ3cTdyUnBx
+            c0tNUStCTWtwNWVEN2Mvc09QdzhRWlEKjZUDiIndwFcXkoO19bjaSxcJpOuwt84k
+            52pIF+PX+mrQIxT9Jc352ZZ0dw/pca/wy3/t9OzCOw9shdVUyO9PGw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-04-19T22:38:11Z"
+    mac: ENC[AES256_GCM,data:B0SZHgvFbvSicFYdKDLA+Cz3uuLUg5gew30HYzaxRiUtWUCO2VM2Nl5PLBTLc4RiZiJD3EN1I+BuOI1SgWCBEALlFliCSYFadC+TOr6O9k4vSqQHC00wDjkHQci6SCClRpqwEvKMxUv0Jz2tSXS6RU8J9TONnjNGCi0J6PBtpV8=,iv:CkxZpIfnCG5uypI5MJsEV68hno27iGw6NG0AQrx+rUU=,tag:/GNe252fxREegXgo2vhBhw==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.2