Rekey secrets

.pre-commit-config.yaml

@@ -1,3 +1,4 @@
+exclude: ^.*\.age$
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v6.0.0
@@ -12,7 +13,6 @@ repos:
       - id: check-shebang-scripts-are-executable
       - id: check-symlinks
       - id: end-of-file-fixer
-        exclude: '^.*\.age'
       - id: fix-byte-order-marker
       - id: mixed-line-ending
       - id: trailing-whitespace