Vault: re-encrypt files as values

[mcint]

Answering calls to make the secret names searchable, both on github and locally, and to see more meaningful and well-scoped diffs

[mcint]

I have unpushed drafts to decrypt value-string-based secrets, supporting round-tripping back out of this format. I need to test that more that ansible-playbook in use decrypts even each-item-in-a-list formulation that's caused the most code headache so far, not just values and dicts, and lists as a whole.

[SuperQ]

I'm not a fan of these inline secrets vars. Unless the tooling has improved, I found it a pain to deal with the vars this way.

I prefer the "vault" style in #458. It's easy enough to ansible-vault view group_vars/foo/vault.

If we do want to switch to this style, can we ad a bit of documentation about how to use these?

[SuperQ]

No, really, I don't like doing it this way. Please address my comments.