The configs for .net I would definitely consider part of the code - they can have some really intense setup for the project! If I was forced to put credentials

The configs for .net I would definitely consider part of the code - they can have some really intense setup for the project! If I was forced to put credentials in there, then I would ignore web.config, but commit a web.config.default file without the credentials. Part of the setup instructions would include copying the file after cloning the repo and putting in your own machine-specific credentials.