SOPS vs Sealed Secrets head-to-head: file-level KMS/age encryption vs Kubernetes-native controller, multi-tool GitOps …