target/
Cargo.lock.bak
*.swp
.DS_Store
CLAUDE.md
CLAUDE.local.md
.claude/

# Secrets and credentials. The baseline every repo under ~/Code carries, kept
# identical so no repo is the one that forgot. Suffix-matched rather than
# `*.env`, which would also catch committed environment files that hold no
# secrets (sweep systemd/sweep.env). `.env.example` is a tracked template and
# is negated back in.
.env
.env.*
!.env.example
*.pem
*.key
*.p8
*.p12
*.pfx
credentials.json