Document manual KDBX entry setup

[domenkozar]

Summary

• clarify that the default KDBX path maps to three nested KeePass groups and an entry title
• show a concrete tree based on [project].name, the active profile, and the secret key
• add step-by-step instructions for creating an entry manually
• clarify that neither the database filename nor the root group should be named secretspec

Why

The previous slash-delimited example could be read as a single entry name or as part of the database/root naming. This made manually prepared KeePass databases difficult to lay out correctly.

User impact

Users can now reproduce SecretSpec's storage convention in KeePass or KeePassXC without trial and error.

Validation

• devenv shell -- npm --prefix docs run build
• git diff --check

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	secretspec	6e01303	Commit Preview URL Branch Preview URL	Aug 13 2026, 09:08 PM