[Benehiko]

spf13/cobra was only used by the example CLI in store/keychain/cmd, yet it put cobra, pflag and mousetrap in the store module's go.mod.

The example duplicated what the docker pass commands already show, so this removes it instead of rewriting it:

• Delete store/keychain/cmd and drop cobra, pflag and mousetrap from store/go.mod and store/go.sum.
• Point the Example section of store/keychain/README.md to plugins/pass/commands, a real application built on the keychain store.
• Add plugins/pass/README.md: using the docker pass CLI (set, ls, get, rm, run, se:// references), troubleshooting the keychain, and embedding the commands with PassStore and WithStore. The embedding snippet was compiled to check it.

go.mod/go.sum were edited by hand; make mod may adjust go.sum.

AI disclosure: I used alki, an AI coding agent running Claude, for most of this change: the rebase, removing the example, writing both README changes, and drafting this description. I reviewed the result.

[docker-agent]

Assessment: 🟡 NEEDS ATTENTION

Lower-confidence findings (not posted inline)

• [low] store/keychain/cmd/main.go:114 — parse error from store/set/save FlagSet printed twice (confidence: not scored — low severity, not verified)
• [low] store/keychain/cmd/main.go:119 — store with no flags silently accepts empty username/password (confidence: not scored — low severity, not verified)

[docker-agent]

Assessment: 🟢 APPROVE

Lower-confidence findings (not posted inline)

• [low] store/keychain/cmd/main.go:137 — store --help prints global usage instead of subcommand-specific flag help (unverified; low severity)
• [low] store/keychain/cmd/main.go:140 — return value of fs.Parse silently discarded with flag.ExitOnError (unverified; low severity, safe for now but fragile if error-handling mode changes)