markdown-vault-mcp: point STATE_PATH at a file, not the PVC mount dir

Fixes IsADirectoryError on startup when the app tried to atomically
write its change-tracking state to /data/state itself.

clusters/base/apps/markdown-vault-mcp/helmrelease.yaml

@@ -20,7 +20,7 @@ spec:
               MARKDOWN_VAULT_MCP_SOURCE_DIR: /vault
               MARKDOWN_VAULT_MCP_INDEX_PATH: /data/state/index.db
               MARKDOWN_VAULT_MCP_EMBEDDINGS_PATH: /data/state/embeddings
-              MARKDOWN_VAULT_MCP_STATE_PATH: /data/state
+              MARKDOWN_VAULT_MCP_STATE_PATH: /data/state/state.json
               MARKDOWN_VAULT_MCP_READ_ONLY: "false"
               MARKDOWN_VAULT_MCP_BASE_URL: "https://md-vault.mcp.aggtaa.com"
               MARKDOWN_VAULT_MCP_BEARER_TOKEN:

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:YAnKLxac4UuDovt4UGHhw1TxVhpEIpcyGJkfSu7hSDda8j+eNhAlT9ViuffW4TAMR4GAVN62yLHclXwNYkpQIA==,iv:4Bt6kNEV35wrJAuFAMNqzPI+GT2ma0XdEOhNw1LmTXE=,tag:xFh6D177ESEGAswr33fcww==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:UZ7IAqWz+Vp/Jy023fz31ZYHftSPuDbTqvx1BBMtA+mKQrZ7rPc5ER2sIrjqaUJ04yXHLCnGpud4AWCEZSkJeA==,iv:FYLmyj6DmL/B7b+szRKK53OuWT5YvkMKVgxMDRzwdLc=,tag:jklpeszc+WBNWol+s9VfoA==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhcFByU1pHb05mNmFFQXEv
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSREEzWTdCMGp0U1BjanAv
-            bFFPUzd5Zmd5aGd5UFNJRktTbVlOU29OWEEwCmp4eGpZeFpROFpzTG5oN29DbVRl
+            ait2R2lKdlB5dVYxY0oyekZnUDV2WXZTTTJVClp0dWU0VHluT2pFcXBiZnhrRDI1
-            aEJJMXV1RVZRL0Fya21EUjBuOW5OWlEKLS0tIFM1eWxnK2dyclZiTm1FcERtWWlR
+            M0VlSDZzWklRcHRCTXQ2N3hiK0pORjQKLS0tIEZyV2VzTDlnS0dLOHZ3SkJTRUVh
-            Mi9acGFhUlE5dlh1blhWcHdHbzBZLzQKdmQ6h3qk7iIa+nOUAayrNV+E1c18d/dR
+            OG50dFArMUVCbHRaVGR4RkdYVGFZWEkKR5+F1hJJu3HtlYND48U/SABpsEjVQgKa
-            L7pEwJqdqb8uzSBaUzamJBdvBee0NT47qVWLKLgXBat+eiTBUrkK6g==
+            jhxiLrOJ5DBouWDeGVYpWUiYKqTQAcD22YtxkBCFlCJlrCPmdE+Dog==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:21Z"
+    lastmodified: "2026-08-26T10:20:26Z"
-    mac: ENC[AES256_GCM,data:Gb8Er4ZEfovhI8wwvE9HUyd4nXq28dvDO3QSU+fkwRXEHO5tgx7oKFCMFLXuyCZEW6vl2V3Y3unHlRFVEiMyo++hzsYPMz/aLFXbpyhZRIylVHumhOebzYQHa702wMmyFYO5lmVRhpm1WZ8RSiFELLdXd1oZp0j2Qd7+TMt4rhk=,iv:IU5C1lC8m3nbSZyP7C3tjAmYiEZ66PyBUwn8fgPd57k=,tag:b/UWzP+dlKAMsvc93B6yCw==,type:str]
+    mac: ENC[AES256_GCM,data:l3J8ZQF86r68PPXR3OLtTGoVSpJubAxZO2HkW3w5AS1X2fJu+BtFN0JqGE/cpMOuqqCC96+ADO47IL2HmjW3sVYEib7MY5eZHeOE91x2fwWGOIxNIrTNFu1pJcF3qBQW5NSie82qffH9mXUlX7khzT59TznQX/kk1pYTj8Sdcv8=,iv:neIcdem2MhKxRNSc8HmK6fCpAyFh+pn37MV2qjok/mI=,tag:sl60gLkeUMFrzX6nLK1tkg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:RCzIQ2VUxlwiCIs7J7XmUAJnjCilnZdIPHY8/9YlrJmEbeykffaAu4rZonyqkg706aGkuN5l2/oB2uQmGSRMWBBi3ZLp8S5a2lqs9RnTmmc0T6HskndjoUa7NLItCf5z+wzgvg8YsoS/U9vVeXW2elvk/0fbKcdjN+FzK08ABjXTVnZgbCLArgQAG3LzZvug4mgRencGJSsEXMAyObfCAmc1aEZ7no3pcaFHI9EugKbZhh5IP8oJ/0UeC8l2hA==,iv:KkzxdAgv3KnGw+kAt0f5tR5mYMONk77n4nBZdbADqog=,tag:w8/DVnZ4wHj7kSf1n8KrQw==,type:str]
+    passwd: ENC[AES256_GCM,data:e6ANWA6/a9RNrVMKgT3ihB8hczlV6rp7qSdxwpjMr9YKEe9qbt6IsKncr7chbNVST8XagDdXwSbaT0COGHFJ2n9r13cjnHDhP5ORsXOgeiUvS1IR6pENlfJNabe47OU34Y31ZE5vCp6iD8fdjWXLLoMU34BBfOX2Ze+Oaz5msSMK+ePse6ApViU1rLVgzl3wpAS35FYuRRigcaCYagfUtGyF90/ULlgeeUUXNDvJNXbVTRYnDZ4ufaZtjS0tLA==,iv:mLwp37drBDmwOxUDhyDexavg6wtUadxllFdM9qjXaQs=,tag:PIM8GzItfxx6firuuoN0IA==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXK21EUVhMRjVPdEFYWHVW
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUEI0U2p3dGpPTmJRbDFO
-            K2NXR2VnQUhjTkJYNXRpMC9YQ28zMmswSkZNCldZVnpId3grazBrSWxyOFBhMXpr
+            SEE3Z08ycG1JOVpUWTNKZnZvcW1DS3ZVQTJJClJnRlA0cmpnQVRrN3lZNUFLRlJ6
-            c2QvRmUyWHBuaHhUWTNEd1JRSTFVMDQKLS0tIElHaE5mVWJDVmx0d3BRWlhudXNu
+            OVo5bU5lTHk2Qm9BcG94WEZLbE1Od0EKLS0tIE53d01FWEg1SmVhWDd3dEhya3I1
-            c2FIRFQ3bHdUeGRaVkFud2ovL2l5Z1kK5Id0Cq+2G9qhWWl61gKgCDX9/TzZuDK9
+            ZnVIanBra2t6dGJrMjJXTUJ3N3pXbDQKj2Qmr9YBOkFTLHPv1AVcXdGvnTThzvhR
-            qNiYZLbbRCCRRIFiou/YYGAeOZOahULRFzp7kpFU+eb2RQ3Lf/49CA==
+            P/xYpElx5F0+/uK3T5n9z9Ny0v1Lr3mDYFXRhsyuVXc6+jd2gDmoMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:22Z"
+    lastmodified: "2026-08-26T10:20:27Z"
-    mac: ENC[AES256_GCM,data:ryJEHqt4NWoauhSTIzmEuHGhWnmhHMdSl6+82PK+QET11yM3HeB+P4WNsjAjWfy2/n7AHrknwLDMYYEVr5BEG2iFvyiSuymgink24kY7JeCPUZ0yxZN9GpUeDzSLS/pKhWidaYMJpAc0Dmm107GNQ/rKll/oy7OYz5k27ufiLFs=,iv:0Wl1WY4TAV/DEkCBsCk+2qAqOjNLQwHH56QibrdeXX0=,tag:19juWUmzAwyiaUixJ+fL5Q==,type:str]
+    mac: ENC[AES256_GCM,data:KifUT3wKB9SLrcsW7jGeJLPEnRvA/IR4FYu2jd1z9wanMK3J8Z5wpf+DkjvtUIDupAh+wjzLLMeHHBcMSFvps5/iMTKQ9lgfMwkkqFKnRnpUx1Au2L7LWFghZlYTSlJ91eK3SB+ffsvz53EzKD2ITHt/qDaQa80j0U25Ztj+sJ8=,iv:D19zt+hsNWYw6ttQw3j5dOwwK4QjfGCWKy8lL5/Ryc4=,tag:eQxDxn+TU2BSh377bMnv+g==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:p7K3yTpcx9TMEBnrHJBCLDzkkYBU2bvffvDXtfbn+hZYhhcoIzEhGJhEJbyYNSsk2ygeHyr5Y/88,iv:jUsOYpJUn5hb+rtfV2/zGfcpVLztfc7XwPA33OSr74k=,tag:WCfS+XSFvuawdIcNcNEsHg==,type:comment]
+    #ENC[AES256_GCM,data:1RaQSBQOKecKVraM87mUGcbWoXAR4N/lV/gffaulL12qE8KZKtJnY0eDCFvc4mVpcwS8jtcGW4RJ,iv:tZJw9MyFPalrIqUciWhdMK7Qoy6vWQOCvFk9hB9zr2A=,tag:dA6T13JixkLtFxkyqWOlWg==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:HJvJMAxwdn01Fw5dBYFmViJ7fxDbA186CaDhRMNlW03H82X5xFTb6UAyhgy6ltkTVU4Pk94kAg0bRhfxQM3/t+5cl99eDb6Ia4paYiyJpAhMd23FUTI9ec1q24FHJhnh6acmujR+H5YNcEW+hzXLTnOoOTDnNg==,iv:MfvMJVp9X40P/kSEmKC+DFTyvNWal1erV7kya3fzo2g=,tag:Zqp2Ezipl5KN+NLqXFjroQ==,type:str]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:Zx4CACkvjABR7cJw6cKqq8I4wjWnsPhfvZe76D7QzROO2xyHfSN1He3yZl+LhhFG3sDWnixwrM+BK02ySVN+dCsoM05uZuwppMTVR4QiNqtKvoG5Yi2IibkdIkvwkV5YFWq1p7W2XOrG66WR6LoZugLPAKzucA==,iv:wL6MxrYSHXQArjdDDLbTjcoWXqmTL+hu6Ww4A00swbY=,tag:wDz1H1TvgalFFYnqKNGnuA==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4ZENXVncrOXp1MW9yWU52
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWRkx6TDJnQTUrWjI1Qk5i
-            RXpJRlZiYWVWd0NKSHBDNmt0Sm9qUXZhUndrCnFMeDczMy9BM1dJeS9CenlpcDVl
+            cTNreTV6NndpQlF5STZFT0UzZlNrTEdTdFZjClNpSmFSdWQ5L2gxb0V5QVdqbWVP
-            N3A1WnF1S3h5c29GZDFRTUN2KzREYzQKLS0tIGFLNTdlM1pTNWNCYjM4dWZKcXp1
+            cGJoZnUrakVMNHo3YnJBaWJON2RKN0kKLS0tIHVseExJM2FqVHNyZzMvdUNzL3RZ
-            Rm5DYjNkTkVXZ0YvdHpYajAvSUgyU00KFUHizWnegcBsUjylO8iogAA5zDYXzjKR
+            YXNxWXFydGZTS29COS91bzNsUmQ2a2sKVaV97We4eoOVkOp9nxzNFPObgO1dOrl9
-            Cpr6ujEuqqfismuocg7WxGChl6d0/nVVyXZ3ywNArMHfFOh/TCVsSQ==
+            rWor0u/KWuiKmzoTouDaSFqQazQcwgJllEtEeX2+Qggy46jPQJY3Kg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:23Z"
+    lastmodified: "2026-08-26T10:20:28Z"
-    mac: ENC[AES256_GCM,data:NCyhZVHTqyb6TxxzVlNIl3phYTcUjR3wEyWQW8EwRAAjnmbM2iP1LbN9vJYPxU9WT0ZPZFhOLTCuoQTbpbdpk481olwRapCavofFmJHbSFVcLKiglT/GTJ8aPCmCVn8vxsL31Arw1NFj/sPORxqfqj4NvR7TwxhG9tpAbO+K/Yw=,iv:JZ2sCO+oAtwxHE5zfQt8ytzcF/eZOKJyn9nMufDc0i8=,tag:jqwfrwdOKOLZacrhwb1mEg==,type:str]
+    mac: ENC[AES256_GCM,data:5BOBITBATT+RkPX0vuNyQR2amMMcUSxZQi88RZ5ZxOvcBvIpVFbb7Xutu/+xJq7K9v2SK4x/jONpZOfHKsQ5ZAB9T9AgY5aLgJxiwWSqAKlwG7c10Ex1cr7FI6YDaBNb0VKj1Eom738gOWRT49EtZ98LEdSmvDOC9y9sGo103v8=,iv:NU8yqHfSfz6KOBavjzYFaYUoj4F7dlnoOQ8E0Jmv2CY=,tag:LwpD+pTG9g+PCiSEA4BMeA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:QaX7IVfDTPvl+eFIDPZC2fLlURFZ9qTqMSNr6Qah8eDRMxEUVOgO5TI9YJS9HQEU5vPUMIhJqugs0QHxEuOwi0bUmTyjSHe93nK+hWqaw+kc4eOf7zbLzur7A8ndoEwx9MpcCprrccPq+R2jL1zaGoAvMtPOFAmdzfeA5c8=,iv:gvcEfM2AgkOc0mXMoxyyVjolQg3VVPCqBmny7CO5zrg=,tag:BO+VD9/TLGMt671XI+vmDQ==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:EkB7G+Cqq6TRo7Ors6cCXJBK376VKWJEfBtkPN7nEmGaG5z313aa9gqbBzwEFKXDMJXriVE7K8vqKXpnMSAYEI+11vgoqaV/gxXn2SMtXxLtFhob+cYX6dTk1gtoz06JnLRZRubSDtim0rw2Mzk0cuBbRNGUcLadlyJDBjI=,iv:VklLMUEQxE3hgw6OvzhsU21Y98rRPEQiXs4VGfeEkho=,tag:0LgaOX4XDX8gnYmP0jVO8A==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQOHVXdUtqbkgyOWkxZy9Y
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSQ0ZGZ0VnLy8wMlpsUUJy
-            OXI1OVdDQTFRL1RhQW14U0FZLzJqVU5VTFVFCnNQYnFHL3hrWHJSa3dHM1Z4blN1
+            KzVlMlVCT2R6QVdhZ1pDbkw3MmVhS0oyem5FCjZpZjVxaXkreXhncWZpcUdObVZP
-            VkZaUnlQOCtjTjFhVXZvemorNFBEOHcKLS0tIDlDM0prdzQ3ejMxWlZldWNxWERI
+            RWJJQys1SlhnMWhjUWRZb3E5Ums1YjQKLS0tIFVNSnVDQ3o3U2w1MS9SSDhEMi91
-            YTFORTcxc3g5c0pPYktuR1RHam11M00KOu5w9pu9Vy/RyAJ8eGw7HOiiCd84CBbL
+            Q1BxV1BQUk5ta2hJNGx3Ly9wZnVLR0kK0w/ZcCgkMrGTcUkgjU7v5wuQAk4i9a4o
-            PKfL8OtugYb28R5IvJ6PsvfFR2TAz0vuFG0gGl5FiNbs21MZ5TkMhw==
+            VsWkeDNDELIvOPaoe0u8Wrwvk9LyQZAALCXSlXrDkKxWaAaK/FFXDw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:20:24Z"
+    lastmodified: "2026-08-26T10:20:29Z"
-    mac: ENC[AES256_GCM,data:9cod++im7wGvOR1mo2u0YXrcol7inftTzAUUIX4TA7csp/zQ+YEu4eKz46mb0YWCHE+o1ojgJWee6BW1U5pYwjoWcnvF7T4rr4SwdmgW6Zy570K010hY/Ep60j3DoR6Tk33JBCJswNWeSV/fyGcLGFaA4PtP3xchccEs7E83BpM=,iv:oY7cTDXJ0miAsPcxog5niWZcMmo2pnaJYqZo2IVG+wo=,tag:VBktPj2CxAflcGSPdjppLw==,type:str]
+    mac: ENC[AES256_GCM,data:G/P29sgNs75YNWvSZDhOv4JlEw2IiFo1C7cJgeWNRj7itbMVT9uWzqOLu6VP3mNHlk3X8b6QKGYgCvZIPF/hPMNb/OWFYHHJlToqlvW7jDF2cWepr0CsXIW2fVu2144LkUbj+QWdN42BLb8qI4LfTo3lXHin+Y0zEzdfLO5v9Uw=,iv:y6j33iUKpvIQxryCAumdgnVHjw5jLjVtbuGjxT1Gyuw=,tag:Avh370T5rnxfmFKwtXmedQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0