Adopt OCSentinel script layout and add Gitea workflow

scripts/protect-attacktracer-secret.ps1

@@ -1,25 +1,15 @@
 param(
-    [Parameter(Mandatory)]
-    [string]$SecretValue,
-    [string]$OutputPath = "C:\ProgramData\OCSentinel\secrets\ocsentinel-upload-secret.dat"
+    [Parameter(ValueFromRemainingArguments = $true)]
+    [string[]]$RemainingArgs
 )
 
 $ErrorActionPreference = "Stop"
 
-Add-Type -AssemblyName System.Security
-
-$outputFullPath = [System.IO.Path]::GetFullPath($OutputPath)
-$outputDirectory = Split-Path -Parent $outputFullPath
-if (-not [string]::IsNullOrWhiteSpace($outputDirectory)) {
-    New-Item -ItemType Directory -Force -Path $outputDirectory | Out-Null
+$newScript = Join-Path $PSScriptRoot "protect-ocsentinel-secret.ps1"
+if (-not (Test-Path $newScript)) {
+    throw "Replacement script not found: $newScript"
 }
 
-$secretBytes = [System.Text.Encoding]::UTF8.GetBytes($SecretValue)
-$protectedBytes = [System.Security.Cryptography.ProtectedData]::Protect(
-    $secretBytes,
-    $null,
-    [System.Security.Cryptography.DataProtectionScope]::LocalMachine
-)
-
-[System.IO.File]::WriteAllBytes($outputFullPath, $protectedBytes)
-Write-Host "Protected secret written to $outputFullPath"
+Write-Host "Compatibility wrapper: protect-attacktracer-secret.ps1 -> protect-ocsentinel-secret.ps1"
+& powershell.exe -ExecutionPolicy Bypass -File $newScript @RemainingArgs
+exit $LASTEXITCODE