# Never commit real credentials or tokens
.env
.env.local
*.pem
*.key
.claude/.credentials.json
*oauth*token*
secrets/

# Generated HF canary files — regenerate with scripts/make_hf_canary_files.sh
hf-repo/