Keep credentials, browser cache, and Cursor skills out of the repository so clones can run from .env.example and npm ci.