fix(zsh): correct zshrc syntax, dedupe FZF_DEFAULT_OPTS, remove leaked secrets

- Comment out stray 'Fix fzf interaction' command that broke zsh-vi-mode init
- Fix _fzf_comprun default preview argument
- Merge duplicate FZF_DEFAULT_OPTS; keep height/border/color + tab accept
- Remove duplicate BORG_FUSE_IMPL (kept pyfuse3)
- Replace hardcoded Netbird setup key and Borg passphrase with comments
- Add secrets.env loader and create ~/.config/secrets.env template
- Set XDG_CURRENT_DESKTOP=Niri to match current compositor

zshrc/.export.zsh

@@ -1,16 +1,18 @@
+# Load private secrets (e.g. BORG_PASSPHRASE, NETBIRD_SETUP_KEY) outside version control.
+[[ -f ${XDG_CONFIG_HOME:-$HOME/.config}/secrets.env ]] && source ${XDG_CONFIG_HOME:-$HOME/.config}/secrets.env
+
 # java jdk adaption
 export JDK_TOOL_OPTIONS="-Djdk.xml.totalEntitySizeLimit=0"
 # FZF
 export FZF_CTRL_T_OPTS="--preview 'bat -n --color=always --line-range :500 {}'"
 export FZF_ALT_C_OPTS="--preview 'eza --tree --color=always {} | head -200'"
-export FZF_DEFAULT_OPTS="--height 50% --layout=default --border --color=hl:#2dd4bf"
+export FZF_DEFAULT_OPTS="--height 50% --layout=default --border --color=hl:#2dd4bf --bind tab:accept"
 export FZF_TMUX_OPTS=" -p90%,70% "
 
 # FD
 export FZF_DEFAULT_COMMAND="fd --hidden --strip-cwd-prefix --exclude .git"
 export FZF_CTRL_T_COMMAND="$FZF_DEFAULT_COMMAND"
 export FZF_ALT_C_COMMAND="fd --type=d --hidden --strip-cwd-prefix --exclude .g-t"
-export FZF_DEFAULT_OPTS='--bind tab:accept'
 
 # temuxifier
 export PATH="$HOME/.tmuxifier/bin:$PATH"
@@ -22,16 +24,16 @@ export EDITOR="nvim"
 export PYENV_ROOT="$HOME/.pyenv/"
 
 # fuse
-export BORG_FUSE_IMPL=llfuse
 export BORG_FUSE_IMPL=pyfuse3
 
 # borg podman
-export BORG_PASSPHRASE="1ChagearC"
+# Load from a secrets manager or private env file instead of dotfiles.
+# export BORG_PASSPHRASE="..."
 
 # manpager
 export MANPAGER='nvim +Man!'
 
-export XDG_CURRENT_DESKTOP=Hyprland
+export XDG_CURRENT_DESKTOP=Niri
 export XDG_SESSION_TYPE=wayland
 export QT_QPA_PLATFORM=wayland
 export SDL_VIDEODRIVER=wayland