chore(gitignore): exclude .secrets/ + *.pem from tracking

Local-only secrets (GitHub App private keys, future per-tenant
credentials) live in .secrets/ on the host. Belt-and-braces with the
existing .env exclusion so a stray copy / rename can't leak.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
rabbitblood 2026-04-16 05:39:31 -07:00
parent 2a5bc11ee2
commit 57870abe98

4
.gitignore vendored
View File

@ -113,3 +113,7 @@ org-templates/**/.auth-token
.initial_prompt_done
.claude-bridge/
.claude/scheduled_tasks.json
# GitHub App private key + other local-only secrets — never committed.
.secrets/
*.pem