Ignore .env files in .gitignore

[Gandy2025]

What

Append an environment/secrets block to the repo-root .gitignore:

.env
.env.*
!.env.example

Why

Fixes the sole finding from the 2026-07-09 production readiness scan
(score 96/100, tier Launch-ready): [Minor · confirmed] .env is not
ignored in .gitignore — dimension Secrets & Credentials.

Nothing is leaked today (no tracked .env exists), but without this a
future git add . could commit a .env holding real credentials. The
!.env.example negation is harmless future-proofing so a template can be
committed later.

Machine-readable findings: https://report.first-tree.ai/agent-team-foundation-launch-readiness-scan-20260709-e22635db.json

Verification

$ git check-ignore .env
.env

$ git check-ignore .env.local     # matched by .env.*
.env.local

$ git check-ignore .env.example   # negation → NOT ignored (exit 1)
$ echo $?
1

.env and .env.* are now ignored; .env.example remains committable.
Only .gitignore is changed (6 insertions).

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}