Credentials and per-environment config should not be committed. Files stay on disk locally; .gitignore now covers .env.development.