
*.js~

# Local secrets (e.g. GitHub OAuth App client secret) — never commit.
secrets/*.json
!secrets/*.example.json
secrets/mcp-bearer.txt

# Uploaded files
public/uploads/
