fn decrypt_file( path: &Path, passphrase: &str, ) -> Result<BTreeMap<String, StoredSecret>, AppError>
Decrypt a secrets.enc file and return the stored map.
secrets.enc