fix: remove any types, dead code, unused exports; add comprehensive tests

- Fix handleRotate bug ignoring Result from rotateSealedSecret()
- Fix dead code branch in useControllerHealth
- Replace all `any` types with `unknown` + type guards
- Delete unused functions/exports (452 lines removed)
- Add 18 new test files covering all hooks, libs, and components
- 233 tests passing, zero tsc errors, zero lint issues

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/hooks/useSealedSecretEncryption.ts

@@ -31,12 +31,31 @@ export interface EncryptionRequest {
   keyValues: Array<{ key: string; value: string }>;
 }
 
+/**
+ * Shape of the SealedSecret manifest constructed for API submission
+ */
+interface SealedSecretManifest {
+  apiVersion: string;
+  kind: string;
+  metadata: {
+    name: string;
+    namespace: string;
+    annotations: Record<string, string>;
+  };
+  spec: {
+    encryptedData: Record<string, string>;
+    template: {
+      metadata: Record<string, unknown>;
+    };
+  };
+}
+
 /**
  * Result of successful encryption
  */
 export interface EncryptionResult {
   /** The complete SealedSecret object ready to apply */
-  sealedSecretData: any;
+  sealedSecretData: SealedSecretManifest;
   /** Information about the certificate used */
   certificateInfo?: CertificateInfo;
 }
@@ -158,7 +177,7 @@ export function useSealedSecretEncryption() {
         }
 
         // Step 6: Construct the SealedSecret object
-        const sealedSecretData: any = {
+        const sealedSecretData: SealedSecretManifest = {
           apiVersion: 'bitnami.com/v1alpha1',
           kind: 'SealedSecret',
           metadata: {
@@ -186,8 +205,8 @@ export function useSealedSecretEncryption() {
           sealedSecretData,
           certificateInfo: certInfo,
         });
-      } catch (error: any) {
-        const errorMsg = error.message || 'Unknown encryption error';
+      } catch (error: unknown) {
+        const errorMsg = error instanceof Error ? error.message : String(error);
         enqueueSnackbar(errorMsg, { variant: 'error' });
         return Err(errorMsg);
       } finally {