The local .env holds a long-lived HA token used for development; keep it out of any push. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>