No more pipe redirection. We tell yq to read the file itself. And we use `--` to ensure it never interprets files as flags.