I previously gitignored rekeyed secrets, thinking they wouldn't be
necessary. For the nix rebuild process to find them, they have to be
added to Git though.
This is the result of ~100 commits to my NixOS config. Since I haven't
always used `agenix-rekey`, this is another initial commit so that none
of the secrets in my git history are leaked
