git_pull_and_sync() was missing the sops decrypt step, so .env on the server was never updated when secrets changed. Now decrypts after checkout, before uv sync. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
git_pull_and_sync() was missing the sops decrypt step, so .env on the server was never updated when secrets changed. Now decrypts after checkout, before uv sync. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>