Secrets

Never commit:

• /mnt/kitchen/private/hermes/.env
• /mnt/kitchen/private/hermes/auth.json
• Forgejo access tokens
• SSH private keys
• session databases or auth caches