Add sops support

[gmajcen]

Summary

Add transparent SOPS decryption support for encrypted env files.

• Files with .enc. in the name are auto-detected as SOPS files (by checking for sops, lastmodified, version keywords) and decrypted via sops -d before parsing
• New Settings → Tools → EnvFile SOPS page to configure the sops executable path (defaults to /opt/homebrew/bin/sops on macOS, sops elsewhere)

No changes to run configuration workflow required.

Test plan

• .enc.env SOPS file — vars decrypted and applied
• Regular .env file — behavior unchanged
• .enc.env that is not a SOPS file — no decryption attempted
• SOPS settings page persists after IDE restart