i made .env replacement that we CAN commit

.env you can hand to an LLM, or git add. Secrets in your vault, keys in your repo, used one command at a time, never printed.