# Never commit OTP secrets, exports, or profiling logs. *.xlsx *.xls *.csv otp-keys-export.* apex-otp-memlog.csv # QR screenshots / backup codes, in case any data is placed in the repo tree. *.png *.jpg *_backup_codes.txt *-backup-codes.txt *recovery*.txt # Python __pycache__/ *.pyc *.pyo .venv/ venv/ .pytest_cache/ # CAP artifacts *.cap