chore: add sops for terminal

.sops.yaml

@@ -8,6 +8,7 @@ keys:
   - &user_lin-va-thinkpad age1avlhszrryt4gf4ya536jhzm7qwt9xfttm8x4sns6h9w2tahzqp8sspz9y5
   - &user_mac-va-mbp-personal age1dccte7xtwswgef089nd80dutp96xnezx5lrqnneh9cusegsnda8sj3dj6c
   - &user_mac-va-mbp-work age1jf7yuycuajc5m8vupgrndjvw8knekr2v9979j68xc5ykvcxag4lss454au
+  - &user_lin-va-terminal age1w6avj7gd4f5frk90lsyh4e2k5am6z92hzlr0vpgrm767muyj59qsnuah62
 
   # System SSH Derived
   - &system_lin-va-desktop age1mxjrvjxkn69kfn2np3wpd73g44fuhsgykw7l5ss9rx30em5jfp2scnrq32
@@ -28,6 +29,7 @@ creation_rules:
       - age:
           - *admin_reichard
           - *user_lin-va-mbp-personal
+          - *user_lin-va-terminal
           - *user_lin-va-thinkpad
           - *user_mac-va-mbp-personal
           - *user_mac-va-mbp-work

homes/x86_64-linux/evanreichard@lin-va-terminal/default.nix

@@ -19,16 +19,20 @@ in
       ssh-agent = enabled;
     };
 
+    security = {
+      sops = enabled;
+    };
+
     programs = {
       terminal = {
         bash = enabled;
         btop = enabled;
-        claude-code = enabled;
         direnv = enabled;
         git = enabled;
         k9s = enabled;
         nvim = enabled;
         opencode = enabled;
+        pi = enabled;
         tmux = enabled;
       };
     };

systems/x86_64-linux/lin-va-terminal/default.nix

@@ -44,5 +44,9 @@ in
     virtualisation = {
       podman = enabled;
     };
+
+    security = {
+      sops = enabled;
+    };
   };
 }