Keep the dictation daemon config versioned with the rest of the setup.
The file carries no secrets (local backend), but if a cloud backend with
an API key is ever configured it must not be committed; whisrs accepts
WHISRS_GROQ_API_KEY-style env vars instead.