🚀 Complete machine migration setup with encrypted backups

- Added comprehensive configuration files for seamless migration
- SSH, GPG, Karabiner, iTerm2, Neofetch, SwiftBar configs
- Pass license management system with templates and documentation
- Enhanced shell functions with MAS updates and moon phase tracking
- Comprehensive encrypted backup system (GPG AES256)
- Included encrypted backups of all sensitive data
- BBEdit as default editor with proper configuration
- Fixed shell compatibility issues
- Merged existing .zsh configs with improvements

Security:
- All sensitive data is GPG encrypted (.gpg files)
- Private keys excluded from version control
- Only configs and encrypted backups are tracked

Following prime directive: durable, thoughtful solutions

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>

backups/complete/RESTORE_INSTRUCTIONS.md

@@ -0,0 +1,64 @@
+# Complete Secrets Restore Instructions
+
+## Master Encrypted Backup
+
+This is your complete backup of all private keys, certificates, and sensitive configurations.
+
+### What's Included
+- SSH keys and configuration
+- GPG private keys and keyring  
+- Docker authentication
+- Application licenses
+- Any other sensitive configuration files
+
+### Restore Process
+
+#### Step 1: Decrypt the backup
+```bash
+gpg --decrypt all_secrets_TIMESTAMP.tar.gz.gpg > all_secrets_TIMESTAMP.tar.gz
+```
+
+#### Step 2: Extract to temporary location first
+```bash
+mkdir ~/restore_temp
+tar -xzf all_secrets_TIMESTAMP.tar.gz -C ~/restore_temp
+```
+
+#### Step 3: Review and restore selectively
+```bash
+# SSH (if needed)
+cp -r ~/restore_temp/secrets/.ssh ~/
+chmod 700 ~/.ssh
+chmod 600 ~/.ssh/config ~/.ssh/*_rsa ~/.ssh/id_*
+chmod 644 ~/.ssh/*.pub
+
+# GPG (if needed)
+cp -r ~/restore_temp/secrets/.gnupg ~/
+chmod 700 ~/.gnupg
+chmod 600 ~/.gnupg/*
+chmod 700 ~/.gnupg/private-keys-v1.d
+chmod 600 ~/.gnupg/private-keys-v1.d/*
+gpgconf --kill gpg-agent  # Restart GPG agent
+
+# Docker (if needed)
+mkdir -p ~/.docker
+cp ~/restore_temp/secrets/.docker/config.json ~/.docker/
+
+# Other files as needed
+```
+
+#### Step 4: Cleanup
+```bash
+rm -rf ~/restore_temp
+rm all_secrets_TIMESTAMP.tar.gz
+```
+
+## Security Notes
+
+- This backup contains ALL your private keys and secrets
+- Keep it in multiple secure locations
+- Test restore process periodically
+- Never store unencrypted - always use GPG encryption
+
+Created: $(date)
+System: $(sw_vers -productVersion)

backups/gpg/RESTORE_INSTRUCTIONS.md

@@ -0,0 +1,45 @@
+# GPG Keyring Restore Instructions
+
+## Decrypting and Restoring GPG Keys
+
+To restore from backup: `gpg_keyring_TIMESTAMP.tar.gz.gpg`
+
+### Step 1: Decrypt the backup
+```bash
+gpg --decrypt gpg_keyring_TIMESTAMP.tar.gz.gpg > gpg_keyring_TIMESTAMP.tar.gz
+```
+
+### Step 2: Extract to home directory
+```bash
+tar -xzf gpg_keyring_TIMESTAMP.tar.gz -C ~/
+```
+
+### Step 3: Set correct permissions
+```bash
+chmod 700 ~/.gnupg
+chmod 600 ~/.gnupg/*
+chmod 700 ~/.gnupg/private-keys-v1.d
+chmod 600 ~/.gnupg/private-keys-v1.d/*
+```
+
+### Step 4: Restart GPG agent
+```bash
+gpgconf --kill gpg-agent
+gpg --list-secret-keys  # This will restart the agent
+```
+
+## Security Notes
+
+- Contains your GPG private keys - highly sensitive
+- Keep encrypted backup in secure location
+- Test restore process periodically
+
+## What's Included
+
+- Private keys (private-keys-v1.d/)
+- Public keyring (pubring.kbx)
+- Trust database (trustdb.gpg)
+- GPG configuration files
+
+Created: $(date)
+System: $(sw_vers -productVersion)

backups/ssh/RESTORE_INSTRUCTIONS.md

@@ -0,0 +1,46 @@
+# SSH Keys Restore Instructions
+
+## Decrypting and Restoring SSH Keys
+
+To restore from backup: `ssh_keys_20250727_132554.tar.gz.gpg`
+
+### Step 1: Decrypt the backup
+```bash
+gpg --decrypt ssh_keys_20250727_132554.tar.gz.gpg > ssh_keys_20250727_132554.tar.gz
+```
+
+### Step 2: Extract the archive
+```bash
+tar -xzf ssh_keys_20250727_132554.tar.gz -C ~/
+```
+
+### Step 3: Set correct permissions
+```bash
+chmod 700 ~/.ssh
+chmod 600 ~/.ssh/config
+chmod 600 ~/.ssh/*_key ~/.ssh/id_*
+chmod 644 ~/.ssh/*.pub
+```
+
+### Step 4: Add keys to SSH agent (if needed)
+```bash
+ssh-add ~/.ssh/your_key_name
+```
+
+## Security Notes
+
+- Keep this encrypted backup in a secure location
+- The backup contains your private keys - treat it as highly sensitive
+- Consider storing a copy in a different location (cloud storage, external drive)
+- Test the restore process periodically
+
+## Backup Contents
+
+This backup includes:
+- SSH configuration file
+- Private keys found in ~/.ssh/
+- Corresponding public keys
+- Proper directory structure
+
+Created: Sun Jul 27 13:26:00 CEST 2025
+System: 15.5