Proposed feature

Apps has a hard requirement on being able to encrypt secrets with GPG, but to simplify the setup for new Platform Administrators we should:

• first have better documentation to support the creation of GPG keys, and setup of SOPS, and
• second have a fallback to support setting up a temporary GPG home and key for local testing

Proposed alternatives

The first should be done on the public docs, as then we can link to it from any repo.

The second should be done here in Apps, as the prime use-case will be for local-clusters and Apps combo.

Additional context

No response

Definition of done

• Public docs for setting up GPG and SOPS
• Scripts and helpers to run a temporary GPG home for local testing