Install cottage (age-encrypted secrets manager) from the right package registry for this project, and wire up the Claude Code hooks + permission deny rule that keep decrypted secrets out of agent context. - View it on GitHub