Move sops decryption

clusters/pi_cluster/flux-system/gotk-sync.yaml

@@ -18,6 +18,10 @@ metadata:
   name: flux-system
   namespace: flux-system
 spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
   interval: 1m0s
   path: ./clusters/pi_cluster
   prune: true

infrastructure/cloudflare/kustomization.yaml

@@ -3,11 +3,6 @@ kind: Kustomization
 metadata:
   name: cloudflare
   namespace: cloudflare
-spec:
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
 resources:
 - namespace.yaml
 - secrets.yaml