Audit and optimize for CapableMind development

Brewfile: stripped to essential tools (~600MB freed), removed boost,
cmake, aerc, newsboat, fontforge, starship, and 24 auto-dependencies.
Added caffeine, ollama, fastfetch, ocrmypdf, tea, sshpass, vitetris.
Dropped 1password, iterm2, github-desktop, hazel, swiftbar, oversight.

Shell: fixed all stale references (fzf, zoxide, starship, old paths,
Homebrew node aliases). Updated project paths to ~/_Dev/. Added
CapableMind aliases (cm, bmf, bmf-health, bmf-status, bmf-logs).

Configs: removed iterm2, neofetch, swiftbar configs. Added capablemind
(launchd plists, MCP example, bmf-start script). Updated SSH config
with git.skemantix.com. Added CLAUDE.md to dotfiles.

Scripts: consolidated 3 backup scripts into 1 (backup-all-secrets.sh),
added pass store backup. Added setup-capablemind.sh for full environment
reconstruction. Updated symlinks.sh for new config structure.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

scripts/backup-all-secrets.sh

@@ -50,6 +50,12 @@ if [[ -f "$HOME/.docker/config.json" ]]; then
     cp "$HOME/.docker/config.json" "$TEMP_DIR/secrets/.docker/"
 fi
 
+# Password store (pass — software licenses, credentials)
+if [[ -d "$HOME/.password-store" ]]; then
+    echo "  🔑 Password store (pass)"
+    cp -r "$HOME/.password-store" "$TEMP_DIR/secrets/"
+fi
+
 # Any license files or certificates (if found)
 if [[ -f "$HOME/.vuescanrc" ]]; then
     echo "  📄 VueScan license"