agents: SSH-User-Gate + geteilter Session-Agent + Git-Signing

Agent-Sessions nutzen mwiegand-agent über den geteilten ssh-agent
(~/.ssh/isac-agent.sock, befüllt von agent-env) und signieren Commits
per GIT_CONFIG_* mit dem Agent-Key statt op-ssh-sign.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012aD7fG6BpN1HchyHeNXZb4

.zshrc

@@ -3,6 +3,7 @@ setopt prompt_subst
 autoload -Uz colors
 colors
 
+fpath=(~/.zfunc $fpath)
 autoload -Uz compinit
 compinit
 

agents/.env.agents

@@ -1,3 +1,17 @@
+export USE_AGENT_SSH_USER=1
+export BW_SSH_ARGS="-o User=mwiegand-agent -o IdentitiesOnly=yes -i /Users/mwiegand/.ssh/id_mwiegand_agent.pub -o IdentityAgent=/Users/mwiegand/.ssh/isac-agent.sock"
+export BW_SCP_ARGS="$BW_SSH_ARGS"
+
+# Git-Signing in Agent-Sessions: mit dem Agent-Key über den geteilten
+# Session-Agent (isac-agent.sock via SSH_AUTH_SOCK aus agent-env) statt
+# op-ssh-sign/persönlichem Signing-Key. GIT_CONFIG_* schlägt lokale und
+# globale git-Configs.
+export GIT_CONFIG_COUNT=2
+export GIT_CONFIG_KEY_0="user.signingkey"
+export GIT_CONFIG_VALUE_0="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeU8FKtjN1+VjhxKZTzyvJ51GzPevrScXgou08hFmjb"
+export GIT_CONFIG_KEY_1="gpg.ssh.program"
+export GIT_CONFIG_VALUE_1="ssh-keygen"
+
 # influxdb
 export INFLUXDB_READ_TOKEN="op://24ylu7osc22gtdcoic6rgjsp2m/mdrtosjm42btdrhejoo4eg4mmu/password"
 export INFLUXDB_URL="op://24ylu7osc22gtdcoic6rgjsp2m/mdrtosjm42btdrhejoo4eg4mmu/url"
@@ -19,9 +33,14 @@ export IONOS_API_TOKEN="op://24ylu7osc22gtdcoic6rgjsp2m/c67ygbr54xsxblxgnoljeawb
 # swift
 export SWIFT3_TOKEN="op://24ylu7osc22gtdcoic6rgjsp2m/uigw4g52gkd6ocmzeeqi4fk2wu/password"
 # bitbucket dc
+export BITBUCKET_DC_URL="op://24ylu7osc22gtdcoic6rgjsp2m/wipkwb7pmc2xyuq5vibywhqvpi/hostname"
 export BITBUCKET_DC_PAT="op://24ylu7osc22gtdcoic6rgjsp2m/wipkwb7pmc2xyuq5vibywhqvpi/credential"
+# bamboo
+export BAMBOO_DC_URL="op://24ylu7osc22gtdcoic6rgjsp2m/delniouzyvkndwtkmovv7hhauy/hostname"
+export BAMBOO_DC_PAT="op://24ylu7osc22gtdcoic6rgjsp2m/delniouzyvkndwtkmovv7hhauy/credential"
 # atlassian cloud
 export ATLASSIAN_CLOUD_PAT="op://24ylu7osc22gtdcoic6rgjsp2m/ywanqqqcviwqyoeoxa6g2au5ki/credential"
+export JIRA_READONLY_PAT="op://24ylu7osc22gtdcoic6rgjsp2m/qqi25p2cuwkjkhbxj7spbjq2fe/credential"
 # n8n prod
 # "mcp": {
 #   "n8n-seibert": {
@@ -39,3 +58,11 @@ export ATLASSIAN_CLOUD_PAT="op://24ylu7osc22gtdcoic6rgjsp2m/ywanqqqcviwqyoeoxa6g
 # }
 export N8N_SEIBERT_API_URL="op://24ylu7osc22gtdcoic6rgjsp2m/qbkhrul2lm7uxy4kjqjpt5eoju/url"
 export N8N_SEIBERT_API_KEY="op://24ylu7osc22gtdcoic6rgjsp2m/qbkhrul2lm7uxy4kjqjpt5eoju/credential"
+# forgejo test token
+export FORGEJO_URL="op://24ylu7osc22gtdcoic6rgjsp2m/zdkxvnabf23xjnp3lwti43hmma/hostname"
+export FORGEJO_TOKEN="op://24ylu7osc22gtdcoic6rgjsp2m/zdkxvnabf23xjnp3lwti43hmma/credential"
+
+# proxmox
+export PROXMOX_URL_1="op://24ylu7osc22gtdcoic6rgjsp2m/xqpmcgcvytlmptfwwpn7kui6ei/url"
+export PROXMOX_USER_1="op://24ylu7osc22gtdcoic6rgjsp2m/xqpmcgcvytlmptfwwpn7kui6ei/username"
+export PROXMOX_TOKEN_1="op://24ylu7osc22gtdcoic6rgjsp2m/xqpmcgcvytlmptfwwpn7kui6ei/credential"