security(hooks): suppress imager output to prevent secret leakage

[jmgilman]

Summary

• Fix security issue where Talos imager printed full machine configuration (including certificates and private keys) to stdout
• The imager's verbose profile output was being captured in CI logs, exposing cluster secrets

Changes

• Redirect imager stdout to /dev/null to suppress profile output
• Keep stderr for actual error messages
• Remove -t flag (TTY allocation not needed in CI)

Important: Secret Rotation Required

The Talos cluster secrets that were logged in previous CI runs are now compromised and should be rotated before deploying the cluster. This can be done by regenerating talsecret.sops.yaml with:

cd infrastructure/compute/talos
talhelper gensecret > talsecret.sops.yaml
sops -e -i talsecret.sops.yaml

🤖 Generated with Claude Code