Secures the workspace against accidental commits of: - .env (skill env overrides, may contain secrets) - .env.* (any env variant) - except .env.example (committable template, can be added later) Includes Korean comment noting secrets policy.