Stop Claude Code from reading your .env with three deny rules

An agent that can read any file in your repo can also read .env, and whatever it reads can end up in...