Initial public release

A chezmoi-based fleet-dotfiles template for macOS workstations:

- Two-way auto-sync via launchd watcher + 5-min puller
- Mesh SSH via modify_authorized_keys driven by .chezmoidata/fleet.yaml
- age-encrypted secrets file
- Bundled Claude Code agentic team (11 agents) + /lite + /lite-sub commands
- Verify-before-claiming Stop hook
- Generic statusline + project-boundary validate-path hook
- Reference launchd plist for cross-fleet task-durations aggregation
  (companion repo: gitea.tojo.team/cardinale/task-durations)
- AGENTS.md walks an agent through the entire setup Q&A interactively
- docs/ covers architecture, security model, fleet onboarding

examples/zshrc.tmpl.example

@@ -0,0 +1,27 @@
+# Skeleton .zshrc rendered by chezmoi. Copy to dot_zshrc.tmpl in your fork
+# and add your own exports / PATH / completions / aliases.
+#
+# The single critical line is the one that sources the encrypted secrets
+# file at the bottom — don't remove that, or your fleet's API tokens
+# won't load on shell start.
+
+# ───────── PATH ─────────
+export PATH="$HOME/.local/bin:$PATH"
+export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH"
+
+# ───────── Editor / pager ─────────
+export EDITOR="nvim"
+export PAGER="less"
+
+# ───────── Completions / shell tools (uncomment what you use) ─────────
+# [ -s "{{ .chezmoi.homeDir }}/.bun/_bun" ] && source "{{ .chezmoi.homeDir }}/.bun/_bun"
+# eval "$(starship init zsh)"
+# eval "$(zoxide init zsh)"
+
+# ───────── Aliases ─────────
+alias ll="ls -lah"
+alias g="git"
+
+# ───────── Fleet secrets (must come last so per-key exports above can be overridden) ─────────
+# Loaded from the age-encrypted file managed by chezmoi.
+[[ -f "${HOME}/.config/fleet-dotfiles/secrets.env" ]] && source "${HOME}/.config/fleet-dotfiles/secrets.env"