Initial public release

A chezmoi-based fleet-dotfiles template for macOS workstations:

- Two-way auto-sync via launchd watcher + 5-min puller
- Mesh SSH via modify_authorized_keys driven by .chezmoidata/fleet.yaml
- age-encrypted secrets file
- Bundled Claude Code agentic team (11 agents) + /lite + /lite-sub commands
- Verify-before-claiming Stop hook
- Generic statusline + project-boundary validate-path hook
- Reference launchd plist for cross-fleet task-durations aggregation
  (companion repo: gitea.tojo.team/cardinale/task-durations)
- AGENTS.md walks an agent through the entire setup Q&A interactively
- docs/ covers architecture, security model, fleet onboarding

.chezmoi.toml.tmpl

@@ -0,0 +1,21 @@
+# chezmoi root config. Rendered to ~/.config/chezmoi/chezmoi.toml on apply.
+#
+# Replace the `recipient` value below with the public half of YOUR age keypair.
+# Do NOT commit your private key (default location: ~/.config/chezmoi/key.txt).
+#
+# To generate a new keypair:
+#   age-keygen -o ~/.config/chezmoi/key.txt
+#   chmod 600 ~/.config/chezmoi/key.txt
+#   # The public key is printed to stderr by age-keygen and on the first
+#   # line of key.txt prefixed with "# public key: "
+
+encryption = "age"
+umask = 0o022
+
+[age]
+  identity = "{{ .chezmoi.homeDir }}/.config/chezmoi/key.txt"
+  recipient = "REPLACE_ME_WITH_YOUR_AGE_PUBLIC_KEY"
+
+[git]
+  autoCommit = false
+  autoPush = false