feat: USDA-dash now uses encrypted .env files

secrets/secrets.nix

@@ -54,27 +54,10 @@ let
     in
     lenStr >= lenSuffix && lib.substring (lenStr - lenSuffix) lenSuffix str == suffix;
 
-  hasPrefix =
-    prefix: str:
-    let
-      lenPrefix = lib.stringLength prefix;
-    in
-    lib.stringLength str >= lenPrefix && lib.substring 0 lenPrefix str == prefix;
-
   nameValuePair = name: value: { inherit name value; };
 
   secretsPath = ./secrets;
 
-  # Helper to convert SSH public key content to age public key
-  sshToAge =
-    sshPubKey:
-    let
-      # This is a simple check - in practice, use ssh-to-age tool
-      # For now, we'll just use the keys as-is if they look like age keys
-      trimmed = lib.replaceStrings [ "\n" ] [ "" ] sshPubKey;
-    in
-    if lib.substring 0 4 trimmed == "age1" then trimmed else null; # Will need manual conversion with ssh-to-age
-
   # Read all directories in secrets/
   secretDirs = if lib.pathExists secretsPath then lib.readDir secretsPath else { };