Feature: Add password flag for zarf tools gen-key

[natrufthr]

Is your feature request related to a problem? Please describe.

I need to be able to pass a password to zarf tools gen-key to generate keys without being prompted.

Describe the behavior you'd like

• Given a state
  Given user runs zarf tools gen-key and provide a password flag with a password
• When an action is taken
• When Zarf is installed
• Then something happens
• command succeeds successfully

Describe alternatives you've considered

(optional) A clear and concise description of any alternative solutions or features you've considered.
Running cosign and not running zarf.

Additional context

Add any other context or screenshots about the feature request here.

I would prefer to stay as zarf specific as possible and use as little other tools I can. This would allow me to do that in line when scripting things out. Thank you!

[brandtkeller]

I think this is a valid request. In order to keep it finely-scoped I would recommend replicating the password flags from zarf tools registry login.

We could follow the cosign pattern as well (reading from the env variable) - but it lacks some consistency we might expect elsewhere.

[nicholas-rees]

This looks like an issue that might be good for me to give a go on. I looked at some of the other issues that are documentation, but this looks like it has a little bit of anything. I would like to give this a go.

I'm following the contributor guide but I don't know if this issue is good with any of the release milestones or even if that part of the contributor guide is even relevant. It looks like the release milestones might not be kept up to date.

Let me know if I'm mistaken on anything so far (i.e. I've picked an incorrect issue or something else). I'll try to get a PR as soon as I can.

[nicholas-rees]

Thanks for assigning me.

I'm working on this, but obviously I have to get familar with the code. Seems pretty straightforward to setup my dev environment, and it seems to be build ok. I'll post in slack if I have any questions.

EDIT:
It does seem like running pre-commit run -a does result in a couple of linting issues, but I don't think that will be an issue since it seems like the ci only tests file that I touch. Again, I'll post in slack if I need advisement.