Security

Never track: tokens, keys, OAuth DBs, histories, raw secret-shaped inventory.

just secrets-scan
just inventory-redacted   # scrubbed → local/ only

Env names only (.env.example). Absolute /Users/<you>/… out of docs free prose.