This is an age+filesystem secrets manager that I made that is basically what you wrote, but with more organization.