A `.env` file contains real credentials and must never be committed to version control. Commit a `.env.example` file with empty placeholder values instead.