dotfiles: ch-attest, fx-attest