docs: improved masterkey setup documentation

docs/age-keys.md

@@ -5,15 +5,33 @@ You need to create your own **age keypair**, add the public key to the repo, and
 
 ---
 
+## 0. Install Age & Sops
+
+First, make sure **age** is installed on your workstation.
+
+```bash
+sudo apt update
+sudo apt install age
+age --version
+```
+
+To install Sops grab the binary release and install it.
+
+```bash
+wget https://github.com/getsops/sops/releases/download/v3.10.2/sops_3.10.2_amd64.deb
+sudo apt install ./sops_3.10.2_amd64.deb
+```
+
+
 ## 1. Generate an Age Keypair
 
 On your workstation, run:
 
 ```bash
-age-keygen -o ~/.config/age/key.txt
+age-keygen -o ~/.config/sops/age/key.txt
 ```
 
-- This creates a new keypair and stores it at `~/.config/age/key.txt`.
+- This creates a new keypair and stores it at `~/.config/sops/age/key.txt`.
 - The private key must **never** be committed to Git. Keep it safe (e.g., in your password manager or vault).
 - The public key looks like this: