**/node_modules
**/dist
**/build
**/.dart_tool
**/coverage
.git
**/*.log
# Secrets: passed at runtime via env_file / bind mount, never baked in.
backend/.env
backend/serviceAccount.json