- Encrypt OCI API key and config with age (secrets/oci_key.age, oci_config.age)
- Auto-restore ~/.oci/ via home.activation on nixos-rebuild
- Add deploy-oracle.sh: creates boot volume snapshot (max 4) before deploying
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
