The devvm's ~/.claude/settings.json carries homelab plugins + MEMORY_API_KEY (0600, added out-of-band, never committed here). A chezmoi apply would revert it to 0644 and overwrite the homelab config with the Meta source. Scope the ignore to hostname=devvm so other machines stay chezmoi-managed.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>