secrets

Nothing secret lives in this repo. Work credentials go in a .env next to bootstrap.sh, and that path is gitignored. I keep the real values in pass (the standard unix password store), not here.