Stop secrets before build.

Block .env files from being bundled into images, artifacts, and production builds. Add a final checkpoint before code leaves your machine or CI system.