I Moved a Folder. Claude Code Told Me Not to Copy My Own Secrets.

Committing your .env is a serious mistake. API keys stolen, credentials exposed, the whole disaster. The best practice is clear: put your .env in .gitignore and you're covered. Except .gitignore protects your repo. Not your machine. A malicious CLI p...