feat: TreatVault encrypted secret manager with Docker Swarm sync and console plugin

Dockerfile

@@ -0,0 +1,16 @@
+# syntax=docker/dockerfile:1.7
+FROM golang:1.24-alpine AS build
+WORKDIR /src
+RUN apk add --no-cache git
+COPY go.mod go.sum ./
+RUN go mod download
+COPY cmd ./cmd
+COPY internal ./internal
+RUN CGO_ENABLED=0 go build -trimpath -ldflags='-s -w' -o /treatvault ./cmd/treatvault
+
+FROM alpine:3.21
+RUN apk add --no-cache ca-certificates docker-cli age
+COPY --from=build /treatvault /usr/local/bin/treatvault
+EXPOSE 9090
+ENTRYPOINT ["/usr/local/bin/treatvault"]
+CMD ["serve", "--file", "/var/lib/treatvault/secrets.age", "--identity", "/run/secrets/barkstack_treatvault_identity", "--listen", ":9090"]