fix gnupg configuration

user/.chezmoiignore

@@ -80,11 +80,11 @@
 .config/teams-for-linux
 .config/yay
 
-.gnupg
+# Ignore only the keyring and runtime state that GnuPG generates itself,
+# so that the real config files can still be managed. Do not ignore
+# `.gnupg` wholesale: chezmoi never descends into an ignored directory, so
+# a `!` negation for a file inside it can never re-include that file.
 .gnupg/crls.d
-!.gnupg/dirmngr.conf
-!.gnupg/gpg-agent.conf
-!.gnupg/gpg.conf
 .gnupg/openpgp-revocs.d
 .gnupg/private-keys-v1.d
 .gnupg/public-keys.d