refactor(secrets): remove migrate_encrypt command

Made-with: Cursor

src/main.rs

@@ -60,12 +60,6 @@ enum Commands {
   secrets init")]
     Init,
 
-    /// Encrypt any pre-existing plaintext records in the database.
-    ///
-    /// Run this once after upgrading from a version that stored secrets as
-    /// plaintext JSONB. Requires `secrets init` to have been run first.
-    MigrateEncrypt,
-
     /// Add or update a record (upsert). Use -m for plaintext metadata, -s for secrets.
     #[command(after_help = "EXAMPLES:
   # Add a server
@@ -330,10 +324,6 @@ async fn main() -> Result<()> {
     match &cli.command {
         Commands::Init | Commands::Config { .. } => unreachable!(),
 
-        Commands::MigrateEncrypt => {
-            commands::migrate_encrypt::run(&pool, &master_key).await?;
-        }
-
         Commands::Add {
             namespace,
             kind,