Publish SecretSpec through WinGet

[domenkozar]

Summary

• add WinGet to the Quick Start installation tabs
• automate future stable WinGet submissions with winget-releaser
• document the one-time bootstrap and token setup for maintainers

Why

Windows users should be able to install SecretSpec from the primary guide,
and new SecretSpec releases should update WinGet alongside the other release
channels instead of relying on manual manifest maintenance.

Publication dependency

• Initial Cachix.SecretSpec 0.18.0 manifest:
  New package: Cachix.SecretSpec version 0.18.0 microsoft/winget-pkgs#413776
• That bootstrap must merge before the documented install command works and
  before winget-releaser can derive later versions.
• The WINGET_TOKEN repository secret still needs a classic PAT with
  public_repo scope for the domenkozar/winget-pkgs fork.

Validation

• nix run nixpkgs#actionlint -- .github/workflows/winget.yml
• devenv shell npm --prefix docs run astro -- check (0 errors)
• official WinGet 1.12 JSON schemas for all bootstrap manifest files
• release ZIP checksum verified against the published SHA-256
• git diff --check

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	secretspec	4088a23	Commit Preview URL Branch Preview URL	Aug 07 2026, 02:53 PM

[domenkozar]

Closing because the documented WinGet package is not currently published.