“I just realized that instead of storing my GPG keyring to disk, I could be just using my Yubikey for that! I followed the (very clear!) steps over at https://github.com/drduh/YubiKey-Guide and got my key up and running in moments (I skipped a few steps that weren’t in my threat model).
I might go back and even consider hardening the keys I have set up.”