Security Secrets live only in .env, which git ignores. .env.example holds placeholders only. Service-account JSON stays ...