Oh that’s fun:

Some instances where, when building software with AI, the AI models will “help you” move files out of .gitignore and take the liberty of moving keys to accessible parts of your application.

One more thing to watch/solve for.