setup.sh now installs git-crypt, Bitwarden CLI, and fetches the git-crypt key from a Bitwarden secure note. Initial setup is reduced to just installing git, cloning, and running setup.sh.
/opt already exists on Linux systems and git clone refuses to clone into a non-empty directory.