# HF rejects raw PDFs in git push; host PDFs elsewhere or use Xet
*.pdf

# Credentials / secrets — never commit
.env
.env.*
!.env.example
*-sa.json
*credentials*.json
*.pem
*.key