.env files are gitignored; only .env.example is committed

Decision

.env and .env.* are gitignored. Only .env.example files are committed. Real secrets live outside the repo.

Why

Committing .env files was the first choice for the early private repo. The repo now ignores them, so a clone never carries live keys.

Impact

• Root .gitignore ignores .env and .env.*, except !.env.example.
• Tracked: apps/functions/.env.example, apps/mobile/.env.example, apps/website/.env.example.
• See architecture-rules.

Status

Active. Replaces 2026-05-30-foundational-env-files-committed.

Sources

• .gitignore (env files block)
• git ls-files shows only .env.example files