- No secrets in this repo. All API keys / tokens live in local .env files (gitignored) or platform secret stores (wrangler secret put, env vars).
- If you can't find a key in a committed file, that is intentional.
- Report a suspected leak privately to the maintainer — never in issues.