# Security note (IMPORTANT)

Do not commit or distribute any `.env` files containing real credentials.

If you accidentally committed secrets (OpenAI keys, SMTP passwords, WordPress app passwords, database passwords, webhook secrets), rotate them immediately.

This repo should ship with `.env.example` only.
