Fix secrets management

crates/shepherd-host-linux/src/process.rs

@@ -273,6 +273,9 @@ impl ManagedProcess {
             cmd.env("WAYLAND_DISPLAY", shepherd_display);
         }
 
+        // Chromium-based browsers and Electron apps need this to use the correct password store.
+        cmd.env("PASSWORD_STORE", "gnome");
+
         // Add custom environment (these can override inherited vars)
         for (k, v) in env {
             cmd.env(k, v);

sway.conf

@@ -1,8 +1,12 @@
 # Shepherd Launcher - Kiosk Mode Sway Configuration
 # This config makes Sway act as a kiosk environment with a custom launcher
 
+# Set up GNOME Keyring for secrets management if available
+exec_always sh -lc 'command -v gnome-keyring-daemon >/dev/null && gnome-keyring-daemon --start --components=secrets >/dev/null 2>&1 || true'
+
+# Update environment variables for D-Bus and GNOME Keyring
 exec_always dbus-update-activation-environment --systemd \
-    WAYLAND_DISPLAY XDG_CURRENT_DESKTOP XDG_SESSION_TYPE XDG_SESSION_DESKTOP XDG_RUNTIME_DIR
+    SSH_AUTH_SOCK GNOME_KEYRING_CONTROL WAYLAND_DISPLAY XDG_CURRENT_DESKTOP XDG_SESSION_TYPE XDG_SESSION_DESKTOP XDG_RUNTIME_DIR
 
 ### Variables
 set $launcher ./target/debug/shepherd-launcher