*.log
*.retry
.env
.env.*
__pycache__/
*.pyc
.DS_Store
.vault_pass.txt
secrets/plaintext/
# Local plaintext vault password must never be committed
vault-pass.txt
secrets/vault-pass.txt

# Placeholder marker generated when password archive is absent
secrets/vault-pass.txt.zip.PLACEHOLDER
# Local installer env overrides with real secrets
install.local.env
*.secret.env
