仍不入库密钥、登录态、依赖包和本地执行报告。

Keep credentials, browser cache, and Cursor skills out of the repository so clones can run from .env.example and npm ci.