Security

• Local-first — no required cloud upload
• env_* never returns secret values
• db_* never exposes credentials
• Never auto-push
• Destructive ops need explicit intent

See root SECURITY.md.