1. Install `sops` and `age` using the appropriate package manager for the OS.
2. Generate an age key and store it securely.
3. Create a `.sops.yaml` file with the age public key.
4. Create a plaintext `.env` file, populate it with secrets, and encrypt it using `sops`.
5. Verify runtime injection of environment variables using `sops exec-env`.
6. Optionally, automate update checks with user consent.
7. Optionally, star the k-skill repository on GitHub with explicit user consent.