Replace goldwarden with pass for the secret/password manager (#817)

* Introduce `pass` for the password manager

* Update gpg-agent ttl since using in pass command

* Replace goldwarden with pass to simplify $RCLONE_PASSWORD_COMMAND

* Update usage of rclone

README.md

@@ -166,6 +166,12 @@ Check [traps](./windows/Multi-booting.md)
    ssh-add ~/.ssh/id_ed25519
    ```
 
+1. Restore encrepted secrets from private git repository
+
+   ```bash
+   git clone '[email protected]:password-store.git' "$PASSWORD_STORE_DIR"
+   ```
+
 1. [Restore encrypted rclone.conf from STDIN](config/rclone.md)
 
 1. Restore shell history

config/rclone.md

@@ -35,16 +35,9 @@ hx "$(rclone config file | tail -1)"
 
 Don't save the file in this repository even if it is encrypted with agenix or sops-nix.
 
-## Persist the token in a session
+## Decrypt the config in a session
 
-Always need the token when modifying config is too annoy.\
-Now it reads from `RCLONE_PASSWORD_COMMAND`.\
-Or directly set `RCLONE_CONFIG_PASS` as this.\
-(`read -s` does not work in zsh)
-
-```bash
-export RCLONE_CONFIG_PASS="$(hx)"
-```
+The token should be injected with `RCLONE_PASSWORD_COMMAND`.
 
 ## Mount