[nooby6]

Summary

• Ignore .env files and environment-specific variants such as .env.local and .env.production.
• Explicitly allow a future safe .env.example template.

Verification

• Reviewed the current default-branch tree: no literal .env file is present on main.
• This change tightens future protection; it does not rewrite Git history or remove any historical secrets.
• No application code changed, so runtime tests are not applicable.