Do not commit API keys, tokens, private keys, local .env files, or generated .minicc runtime data.

To report a security issue, use a private GitHub security advisory for the repository rather than opening a public issue.