fix: remove any types, dead code, unused exports; add comprehensive tests

- Fix handleRotate bug ignoring Result from rotateSealedSecret()
- Fix dead code branch in useControllerHealth
- Replace all `any` types with `unknown` + type guards
- Delete unused functions/exports (452 lines removed)
- Add 18 new test files covering all hooks, libs, and components
- 233 tests passing, zero tsc errors, zero lint issues

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/types.ts

@@ -75,17 +75,6 @@ export function PlaintextValue(value: string): PlaintextValue {
   return value as PlaintextValue;
 }
 
-/**
- * Create a branded encrypted value
- * This is typically used by encryption functions
- *
- * @example
- * return Ok(EncryptedValue(encryptedString));
- */
-export function EncryptedValue(value: string): EncryptedValue {
-  return value as EncryptedValue;
-}
-
 /**
  * Create a branded base64 string
  *
@@ -106,17 +95,6 @@ export function PEMCertificate(value: string): PEMCertificate {
   return value as PEMCertificate;
 }
 
-/**
- * Unwrap a branded type to get the raw string
- * Use sparingly - only when you need the raw value
- *
- * @example
- * const rawValue = unwrap(plaintextValue);
- */
-export function unwrap<T extends string>(value: T): string {
-  return value;
-}
-
 /**
  * Helper to create a success result
  *
@@ -196,7 +174,7 @@ export interface SealedSecretSpec {
 /**
  * SealedSecret status condition
  */
-export interface SealedSecretCondition {
+interface SealedSecretCondition {
   type: string;
   status: 'True' | 'False' | 'Unknown';
   lastTransitionTime?: string;
@@ -233,15 +211,6 @@ export interface PluginConfig {
   controllerPort: number;
 }
 
-/**
- * Default plugin configuration
- */
-export const DEFAULT_CONFIG: PluginConfig = {
-  controllerName: 'sealed-secrets-controller',
-  controllerNamespace: 'kube-system',
-  controllerPort: 8080,
-};
-
 /**
  * Key-value pair for encryption dialog
  */
@@ -250,16 +219,6 @@ export interface SecretKeyValue {
   value: string;
 }
 
-/**
- * Encryption request parameters
- */
-export interface EncryptionRequest {
-  name: string;
-  namespace: string;
-  scope: SealedSecretScope;
-  keyValues: SecretKeyValue[];
-}
-
 /**
  * Certificate information extracted from PEM certificate
  */