automates listing of keyfiles

__update_sops.sh

@@ -1,6 +1,7 @@
 #/usr/bin/env bash
-
+# Purpose: manage .sops.yaml based on gpg keys in the same dir
 set -euo pipefail
+# sops.yaml doc: https://github.com/getsops/sops?tab=readme-ov-file#using-sops-yaml-conf-to-select-kms-pgp-and-age-for-new-files
 
 function fn_extract_fpr(){
   gpgkeyfile=$1;shift;