Snapshot of main at 9f39a6e1e (2026-11-02)

.public-exclude

@@ -0,0 +1,14 @@
+# Paths left out of the public snapshot (scripts/publish-public-snapshot.sh).
+# One git pathspec per line; blank lines and lines starting with # are ignored.
+
+# Firebase service account (private key). Lives in storage/app on the servers.
+storage/app/*firebase-adminsdk*.json
+
+# config:merge backups; older ones may hold flattened env() values.
+storage/config-backups
+
+# Local agent worktrees (gitlinks).
+.claude
+
+# Reviewed and allowed despite the file-name check ('!' = keep in the snapshot).
+!resources/skill_tags/Cyclos tags/timebank_cyclos_skills.sql