Retire: capture uncommitted working state at retirement

Committed as-is on 2026-08-26 while retiring this repo, so the working
tree that existed at reformat time is preserved in history rather than
only in the NAS backup.

.gitignore

@@ -1,3 +1,16 @@
+# Secrets / credentials
+.env
+.env.*
+!.env.example
+secrets.md
+.secrets.md
+*token*.json
+*credential*.json
+*.key
+*.pem
+*.pfx
+*.p12
+
 # Data directories (large files, not for version control)
 CLM_Data/
 LogFiles/