- Remove MEMORY_API_KEY and CLAUDE_MEMORY_API_KEY from settings.json env block - Replace mcp.json inline config with wrapper script that sources GPG-encrypted secrets - Add new rotated key to encrypted secrets.zsh
- Disable metaclaw-memory plugin, add claude-memory-mcp hooks and env vars - Add ~/.mcp.json with claude_memory MCP server config - Add MEMORY_API_KEY/MEMORY_API_URL env vars alongside CLAUDE_MEMORY_* aliases