getsops/sops ? reverse-engineered prompt

Build me a simple secrets manager for config files that lets me keep sensitive values encrypted in the same file I already use for app settings.

I want it to work with YAML, JSON, ENV, INI, and binary files, and let me encrypt and decrypt values using AWS KMS, GCP KMS, Azure Key Vault, Huawei Cloud KMS, age, or PGP. The experience should feel easy, so I can open a file, edit secrets normally, and only the secret parts stay protected. It should also handle keys cleanly and be safe for real world use in devops and cloud setups.

If you need to check current docs for any details, look them up online and then implement the rest in a clean, working way.