X_SECRETS_TAMPERED
Means
the secrets file failed its authentication tag
Typical cause
under a key whose id already matched, the ciphertext or the header bound into it as AAD changed after sealing. GCM refuses rather than returning garbage
Fix
git checkout -- secrets.enc.json, then x secrets show --json