Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.