Updated to reflect developer tools needed. If on linux, brew helps with install.

README.md

@@ -82,6 +82,22 @@ update_containers.sh
 - `composectl.py` infers Compose stack names and paths from `compose-services/`.
 - `update_containers.sh` is a compatibility shim that delegates to the Python tool.
 
+## Developer workstation tools
+
+On this Linux workstation, install the repository's Kubernetes and infrastructure CLI tools with Homebrew:
+
+```bash
+brew install hashicorp/tap/terraform helm kubernetes-cli jq sops age
+brew tap siderolabs/tap
+brew install siderolabs/tap/talosctl@1.14
+brew tap devantler-tech/tap
+brew install --cask devantler-tech/tap/ksail
+```
+
+Terraform, Helm, kubectl, and Talosctl are used for cluster provisioning and operations; `jq` supports the documented command examples; SOPS and age support the repository's encrypted-secret workflow. The Talosctl formula is pinned to the 1.14 minor line used by this cluster. KSail is also configured as a workspace MCP server in the root `.mcp.json`; keep the Homebrew binary on `PATH` so VS Code can launch it.
+
+Compose operations additionally need Docker or Podman. This workstation uses its OS-managed Podman package; install Podman through the OS package manager when setting up another Linux machine, or use `brew install podman` if managing that CLI with Homebrew. Homebrew versions are workstation tooling, not deployment pins: deployed versions remain defined in the repository's Compose, Helm, and Terraform configuration.
+
 ## Runtime support
 
 The CLI detects and uses whichever runtime is available: