Secret plaintext sits in working tree for Phase 3 eval only; Phase 5 re-encrypts under the new unified git-crypt key.