The previous version pointed at /home/sam/.secrets, which exists on .13 but
NOT on .27 — so the subagent would work on one machine and fail on another.
It had the same bug before in reverse (pointed at environment.d/10-secrets.conf,
which was missing the key on .13).
Now: require the OPENROUTER_API_KEY environment variable, document
~/.config/environment.d/10-secrets.conf as the canonical source (the only one
systemd user services read, which is what Paperclip workers get), and fall back
to ~/.secrets only if it exists.
Sam Rolfe
8111abea38