docs: add pass and gcsm providers to navigation and reference pages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: domenkozar

docs/astro.config.mjs

@@ -47,8 +47,13 @@ export default defineConfig({
             { label: "Keyring", slug: "providers/keyring" },
             { label: "Dotenv", slug: "providers/dotenv" },
             { label: "Environment Variables", slug: "providers/env" },
+            { label: "Pass", slug: "providers/pass" },
             { label: "LastPass", slug: "providers/lastpass" },
             { label: "1Password", slug: "providers/onepassword" },
+            {
+              label: "Google Cloud Secret Manager",
+              slug: "providers/gcsm",
+            },
           ],
         },
         {

docs/src/content/docs/concepts/providers.md

@@ -12,8 +12,10 @@ Providers are pluggable storage backends that handle the storage and retrieval o
 | **keyring** | System credential storage (macOS Keychain, Windows Credential Manager, Linux Secret Service) | ✓ | ✓ | ✓ |
 | **dotenv** | Traditional `.env` file in your project directory | ✓ | ✓ | ✗ |
 | **env** | Read-only access to existing environment variables | ✓ | ✗ | ✗ |
+| **pass** | Unix password manager with GPG encryption | ✓ | ✓ | ✓ |
 | **onepassword** | Integration with OnePassword password manager | ✓ | ✓ | ✓ |
 | **lastpass** | Integration with LastPass password manager | ✓ | ✓ | ✓ |
+| **gcsm** | Google Cloud Secret Manager (requires `--features gcsm`) | ✓ | ✓ | ✓ |
 
 ## Provider Selection
 

docs/src/content/docs/reference/providers.md

@@ -66,6 +66,30 @@ onepassword+token://user:op_token@SecureVault   # Service account
 **Prerequisites**: `op` CLI, authenticated with `op signin`
 **Storage**: Item name `{project}/{key}`, tags `automated`, `{project}`
 
+## Pass Provider
+
+**URI**: `pass://` - Uses Unix password manager with GPG encryption
+
+```bash
+pass://                       # Default password store
+```
+
+**Features**: Read/write, GPG encryption, profiles, local storage
+**Prerequisites**: `pass` CLI, initialized with `pass init <gpg-key-id>`
+**Storage**: Path `secretspec/{project}/{profile}/{key}`
+
+## Google Cloud Secret Manager Provider
+
+**URI**: `gcsm://PROJECT_ID` - Stores secrets in Google Cloud Secret Manager
+
+```bash
+gcsm://my-gcp-project         # GCP project ID
+```
+
+**Features**: Read/write, cloud sync, profiles, service account support
+**Prerequisites**: `gcloud` CLI, authenticated, Secret Manager API enabled, build with `--features gcsm`
+**Storage**: Secret name `secretspec-{project}-{profile}-{key}`
+
 ## Provider Selection
 
 ### Command Line
@@ -95,5 +119,7 @@ export SECRETSPEC_PROVIDER="dotenv:///config/.env"
 | DotEnv | ❌ Plain text | Local filesystem | ❌ No |
 | Environment | ❌ Plain text | Process memory | ❌ No |
 | Keyring | ✅ System encryption | System keychain | ❌ No |
+| Pass | ✅ GPG encryption | Local filesystem | ❌ No |
 | LastPass | ✅ End-to-end | Cloud (LastPass) | ✅ Yes |
-| OnePassword | ✅ End-to-end | Cloud (OnePassword) | ✅ Yes |
+| OnePassword | ✅ End-to-end | Cloud (OnePassword) | ✅ Yes |
+| GCSM | ✅ Google-managed | Cloud (GCP) | ✅ Yes |