fix: close OpenBao recovery probe input

internal/openbao/bootstrap.go

@@ -163,6 +163,7 @@ func validateRecoveryRecipient(recipient, bundlePath string) error {
 	}
 	defer os.Remove(probePath)
 	cmd := exec.Command("age", "-r", recipient, "-o", probePath)
+	cmd.Stdin = bytes.NewReader(nil)
 	if output, err := cmd.CombinedOutput(); err != nil {
 		return fmt.Errorf("validate OpenBao recovery recipient: %w: %s", err, bytes.TrimSpace(output))
 	}