fix(zsh): correct zshrc syntax, dedupe FZF_DEFAULT_OPTS, remove leaked secrets

- Comment out stray 'Fix fzf interaction' command that broke zsh-vi-mode init
- Fix _fzf_comprun default preview argument
- Merge duplicate FZF_DEFAULT_OPTS; keep height/border/color + tab accept
- Remove duplicate BORG_FUSE_IMPL (kept pyfuse3)
- Replace hardcoded Netbird setup key and Borg passphrase with comments
- Add secrets.env loader and create ~/.config/secrets.env template
- Set XDG_CURRENT_DESKTOP=Niri to match current compositor

zshrc/.aliases.zsh

@@ -1,5 +1,6 @@
-alias qk='pi --model kimi-k2.6:cloud -p'
-alias qm='pi --model minimax-m3:cloud -p'
+alias qk='pi --model kimi-k2.6 -p'
+alias qc='pi --provider ollama-cloud --model kimi-k2.7-code:cloud -p'
+alias qm='pi --model minimax-m3 -p'
 alias cl='clear'
 alias cld='clear && cd'
 alias neo='neofetch'
@@ -12,7 +13,8 @@ alias col='kitten themes'
 alias sc='~/scripts/theme-switch'
 alias cc='bash -c "$(wget -qO- https://git.io/vQgMr)"'
 
-alias nup='sudo netbird up --setup-key F4098B17-55C2-447B-87C7-B75CAEFB4058'
+# Store setup key outside dotfiles (e.g. pass / bitwarden / 1Password).
+# alias nup='sudo netbird up --setup-key $NETBIRD_SETUP_KEY'
 
 # Scripts
 alias br='/home/liph/scripts/niri_br.sh'