agnets done

.gitignore

@@ -1,4 +1,9 @@
-#env
+# Local configuration is never committed. This rule read "#env" — commented out,
+# so it matched nothing and every .env in this directory was committable. The
+# `!.env.example` negation below only makes sense against a rule that excludes
+# them, which is what gave it away.
+.env
+.env.*
 
 # ...but the template belongs in the repository: it is the one place the API's
 # location is documented, and a checkout with no .env needs it.