# Hugging Face secret token — never commit hf-token # Neon Postgres DB credentials (DATABASE_URL) — never commit neon-db # Gateway API key — never commit api-key # Pasted screenshots / scratch images image.png