Claude Code automatically reads .env files without asking. Add deny rules to protect secrets.
Use Git Extensively
Never Auto-Approve Bash Commands
