v0.21.0

Changelog

• 32ff2fc chore(worker): migrate to vitest 4 — clears the dev-dep advisories
• 4803df6 refactor!: move secrets projects to wapps projects
• 06cc502 fix(doctor): check what actually gates a secret read
• 4b5d96b docs(changelog): cut v0.21.0
• aa8fc04 docs: rewrite for a world with no encrypted archive
• 46ee53e refactor(secrets)!: remove the legacy git-age backend