Add bom-decomposition and secret-management router entries, promote
git-sync-check to the always-on set, and move secret-management out of
always-on since it only matters when touching credentials or config.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
