security-ops

secret_management: - "NEVER hardcode secrets (API keys, passwords, tokens) in source code." - "Always use Environment Variables loaded from a `.env` file." - "Ensure `.env` is added to `.gitignore` immediately upon creation."