fix(hermes-db): reencrypt with correct SOPS recipient key

Use age1uuxf066x... from .sops.yaml instead of local key
that the cluster SOPS decryptor cannot read.

apps/base/customer1/hermes-db/hermes-db-credentials.yaml

@@ -5,20 +5,20 @@ metadata:
     namespace: customer1
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:R3DLxC5/,iv:Q9026dVs2OTUzSldYtDh1cMP/6qxW68pbhphJhwlk5Y=,tag:ISs06+LqVP/aR/oxYP0K/Q==,type:str]
+    username: ENC[AES256_GCM,data:4QolDU9x,iv:hDtGbpDnzwEMTFsb0AN4Mj0DYJ7gJJGVtG87RZYyBT4=,tag:Po0IES1AfnIoq3Bl2TWnsA==,type:str]
-    password: ENC[AES256_GCM,data:u0bmdtnkLmrECk3N0LrO6T7Uwy7iqAfkgfK4TqS6H3k=,iv:6FYk+vHKr6jjizTkZChUsYQAKKNgA7dP6vgDETg9Lcg=,tag:FQ/hpK93OTbID9OT8XfzHA==,type:str]
+    password: ENC[AES256_GCM,data:0uMXswkEF/RlH5PLFfOrew7/n9URpf5YM7GMnoEVO0k=,iv:9LasAdfoBbTeEXCQmFjGjNnB5UY4JxX4QM7V4YY0GiU=,tag:L3Kb9Z366jdBe3p1a3hdzQ==,type:str]
 sops:
     age:
-        - recipient: age1z674fe9c0whe6g55l9lpm6vssx0l9xyzw5rv42tucwua25gvvg6q42t77v
+        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRcVcvVjJZeDdBWFZ2Nmox
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZWXhlYmxJMnd6THgrbE5Z
-            YnVrVXBpUkhDUFNIMWMySnNtcXkyRU9tNnhFClhCWEFrSStneTYwVFZhbE9sUHlh
+            Si9wWkI2bklvTWZSR1lodWpVTTIwV3dNODFnCnhKRSsveFRMbFBvZGMrM00wd2hy
-            OHNsQWtjb1VyMnE1cGM1UWZKKytXWE0KLS0tIDVDclVnTFFTbWJ6SXdFblZBTkl4
+            UTBHQTZERUhGWmt0aVdlWmZDYVNOWjAKLS0tIGI3Z0lFTHN3ZUhYNUxrdzVEb09n
-            UEpBUU1ldWZVc0Jadm1pUHVOaW04bnMKHWfeHUikSfN9+Q27eD1xsqbXbZ8H3T2X
+            dDFrSzZTdDU0NVU2YUNCK0NqdTdhQUkKL1Pp3OY0S/u1f1KxcXqgtdQ8V466W0On
-            MKVildkb3jtUIJvA1FS+8RU0LkhmsoxKtE1ox0XQ66dAZPa8UVgLQA==
+            Lw0FLig3aeAQG+XTGLbC8WYYxPYLznk5vKJlCZPK1A4O42zixiLOSg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-02T22:00:51Z"
+    lastmodified: "2026-05-02T22:14:04Z"
-    mac: ENC[AES256_GCM,data:zOHEP8m1lGrcPMfpZ6aEBnQWfe1pAXBWk0z85ghkMxgM/a5pp24RvEzprRQBMpx36tnd+Xk3oYwCwTUVv0Y5xm7ZFK0tGSbXbKHrqNoOYPHPnbhG3GB7kIRcxlK4FJXy4BAPHJSUv5MrfIAmLj4Fa5XCbsDeqRWazyytUnrDNvc=,iv:SBsIMSE44I9wdcSmCg7KBetdnyjj63oFol5K2+54Y78=,tag:LeBp0JWAmjCvhcPcwOUvhw==,type:str]
+    mac: ENC[AES256_GCM,data:kkIkkVXXUvEvnky8EIqWdOGw10pAShuwJ/B1g0HW49iUchP8sEDJbP2o7NFQKVcj14Rpo7FfpiIcO12yh/WngAUo2o0kXYQsJNnMqpnePyHePwWWcTaiXE/8pqLuL0bTQ3MWK/Xp5CH/tvf22rS9ntuNTBDmhGqQDm+qqNyw/sA=,iv:yYxAfWg/b4WtdnP78AJDwxRWAonvSVPRtxqQrlytIwA=,tag:bNFwg3cxD+ZrZGQT8coePA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2

apps/base/customer1/hermes-db/memory-db-credentials.yaml

@@ -5,20 +5,20 @@ metadata:
     namespace: customer1
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:qCoYuXNK,iv:cZIJ9IgPWBnfGsNDFIT3T63v+jzxKMrTDcbY4R9ZXDk=,tag:THcqn7xE3UOFmq/YGEj8zg==,type:str]
+    username: ENC[AES256_GCM,data:aBZzGnqc,iv:V27qpmj00bYIERMxBGZ72bHkN6rIkdrSOzzDRj21kpA=,tag:7mCcAeOe+Gst2Fw6dZt2dw==,type:str]
-    password: ENC[AES256_GCM,data:S594bfUc+w83/M6eoMuzWaTboTmbBOjq5WEy+ExNzG8=,iv:JGLwfvei/SmMaLUneZ20/Pp8WsnWP+Ih87sTIyllDFA=,tag:VlH+4Wopp2z9J4MTSDYH2g==,type:str]
+    password: ENC[AES256_GCM,data:B02Xw4UUoGvjLFd2AYYx6kVHeQ2q+K40NHgNguna5BU=,iv:+Cli7nB2j5DC6zI0uXfFYUkBsz2XRMwm3y81WsuRzCA=,tag:ziIEeiW+rkkkAkDnWmCb7Q==,type:str]
 sops:
     age:
-        - recipient: age1z674fe9c0whe6g55l9lpm6vssx0l9xyzw5rv42tucwua25gvvg6q42t77v
+        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXQU1PbFNMWTMyM2dxUlpp
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArZ09BMHFWRGNJMGJpdGpL
-            eTRHbnRXSnk2bDR4VVZycmFUcUVZYVRvUTJnCkFuQURyMTQ0Y0RwUDZNQWpFRFMx
+            ZGZGL0tvWWUwVXRWNlBpUU9QUHZEcUF5emdrCkh5RmFTeWpMY2UyalVwZFNLVXhk
-            Q0ZHRHdzN2VCeU1vcWx6dzFKT3cwQk0KLS0tIDZYYkxoSGk1RmF5VjJkK09IejJ1
+            MW4rS202MktiekxKZzZBbnpwVlowRXcKLS0tIDlpK2VycDRxMHdPeExycmNMZXh6
-            SmR0TGlHOGZad2NNa1grUVNGQnZNUFUKHAJhqYReMS+w5gjQqqHTWafy6etxLpDP
+            YTVBaVFobTZieStEN3pUVy9ZVU5iKzAKxozE9s5lFIuvnh/R0ySDkLoYQ8lV62KT
-            mRujATlpk85g60GeKB7mwWvvX82SpaOZ9GJ+LePjpXwdclIOusofhg==
+            hVkeBYdK5u9gGakmw+okUVNKS2Hh+7Mio6OIvM+jLrpTgsd8NzabWg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-02T22:00:51Z"
+    lastmodified: "2026-05-02T22:14:04Z"
-    mac: ENC[AES256_GCM,data:5EPPuVDZNXYE50rnXQyxajV4Zs0gZX+Lu5Zf5oERLs/TqFEBTQkew3hMMLuMflg3WQME7f9vcOVIYNAXL93rUCt28KHDAxv5WSNyBIZdTuZvfsYK6+we41wjdehvTf4SqsX2KznBVJKIO65ypNUtzrW/rJCj440UwWpgm/B2+/0=,iv:umvqqa7eSVgsbTopdOz0vkJdVPQxa66SFQx9dDxovmg=,tag:SJmrzPoX4gdrdTNEj8qe1g==,type:str]
+    mac: ENC[AES256_GCM,data:yKiV+s5d5O/XT+J92ShQR0rqnSc+VnmH3BnvfNdkOqfMjZsYQAWLtEmGaOKUCCkWwvE1J4B5DhmMAuPhb5RVekirZkQyaXqPO7MA2riRvFQD24MZGtAeGHRRiLMH4L/UMEAm3YqtSKOj5tfjWica4pXQDsmLS0b/qNq+kXTo/aI=,iv:YuG+qxuwYOflVzW+hj8frwhpD833+xAMx6aki0dG8Qw=,tag:ExMYr24Xqztp8atid2eCBg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2

apps/base/customer1/hermes-db/trading-db-credentials.yaml

@@ -5,20 +5,20 @@ metadata:
     namespace: customer1
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:fqozOGjMOA==,iv:+7yvkH0+PTQEqXbd2teyN+VqOLJBDPs03EzUBdOMgdw=,tag:a8wZr/hCbA5xd1tY7OYFAA==,type:str]
+    username: ENC[AES256_GCM,data:M3gBIiP+uA==,iv:QhosCv8SfKcGMzy0Ja9+son5okXVtML5l9JUi/c2C9U=,tag:juYKzLFLsDGXSsgaF/BI3g==,type:str]
-    password: ENC[AES256_GCM,data:JBfMrq2fsQHGAaw5qGFcjrQc7ID+v1f4pq9uvZxup5o=,iv:CgcXAovSEHrtGmyFzlG8qMwsYhijec4w+CBtX26KgVI=,tag:Y1niqpPBZiDtwWQKipjjNA==,type:str]
+    password: ENC[AES256_GCM,data:9ajk/hBlnzkg2fi/zM0Rzx9MACyMKhtyv3lOERBcR4Y=,iv:voTjlgJVgO8yXirIgbAzg8MqmSxAdmmPPtPpeWYLqwA=,tag:RBBl4xD0NplMqp8y6oS8uw==,type:str]
 sops:
     age:
-        - recipient: age1z674fe9c0whe6g55l9lpm6vssx0l9xyzw5rv42tucwua25gvvg6q42t77v
+        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVM3h1ajJsdkwxeG10ZklX
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvZDg2amk0eVZSRUUvNkdO
-            S0V5dVVpYm5rUmtHZVVzcFJITEhpaHlLVmw0Ckg4UTFoblZMUUo4RDZraXZ3bFJX
+            TTIySjB3QVpwMjlIcWE1dDBEeVBUSDlLbGpNCmVIL3hGeWY4TDJORGk0amZNU1dC
-            MXduaFc3eW1Hd0Y0K292ZzVzdW5OK00KLS0tIFFFejMxSkN0cDQrbjhLcVBhb25H
+            czdwRFM3c2VTcVZUVXZoUUM0R0JNY2MKLS0tIHI3ODhRMjJ6NHhDSjBEbGx4QURj
-            LzBTZ0pLbUJDUmsyN1JiTUFWUVU2dUEKogDQhc16qijRDOR3dVpOhTcm7TBXblhR
+            eVI0d1ZhNStZajU5K2lEVmhNalRrWDgKJStJ5MsUWBF1Ceq1uiTwxu8R8dzFz+SL
-            jn8rx6WODXrHTVqkRzJV7iYCvSb/mHCyRoBC5WvoUsNQTa4u2FtBkg==
+            MtFisTEwxgu5HoMpj3hxiDIMWi2pflp/iDwksK43BSw9lTHNYyQDWw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-02T22:00:51Z"
+    lastmodified: "2026-05-02T22:14:04Z"
-    mac: ENC[AES256_GCM,data:BNXMSqTw3tTnSaUTF2vHmg7NM/eA3DuomPKrbTQR2X4TKJtdj5KNs5RbC9DeWktFze1QtT3nreTAm5jAHAz4wjWGIjBgqPy2KBy/ivXOGQJlCf80fiBwHLYcF4J10MC7yRp/yiTOInAVhCwH+B+KHgCtHlvlOhRiKcrgwvdsB38=,iv:zOpLrG43GOynzWSR+90SC/xQwUckOjn03povK6/7z4A=,tag:AH9Gc1aqpHLnZ99FLZ2U2w==,type:str]
+    mac: ENC[AES256_GCM,data:Tkg6KYjxddWMynrLZP26zjP+fp++WtMaPDf79CJie/Kps6PvFWHXDAXAhcS406xOEdj29IgBjrCGJp9PQK7nmI9UXw//p+s201jhG+hFCCG+estOmZyFJL0sHDZlAWx/993swwymDfTX564AfC7dj61MqdCQUz3BISSCjK4Tyd8=,iv:nC9LetZDlQ8SCiFf0MYi7og6qy76+tz7+7v6UM3PJrg=,tag:cWhU1egQAtVYwSZ9vbRi4Q==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2