>>> read this before you write a single line of code <<<
feature/user-auth — new featurefix/login-redirect — bug fixhotfix/api-crash — urgent fixexperiment/new-model — ML / R&Ddocs/update-readme — docs only.env
DATABASE_URL=postgres://real:pass@host/db
SECRET_KEY=my-super-secret-123
API_KEY=sk-live-abc123xyz
# real credentials = instant security risk
.env.example
DATABASE_URL=your-database-url-here
SECRET_KEY=your-secret-key-here
API_KEY=your-api-key-here
# placeholder values only — safe to push