Great question—we treat generated code as production code too. Secrets/Env: - `${{ secrets.YOUR_SECRET }}` GitHub Actions syntax throughout - `.env.example` +

Great question—we treat generated code as production code too. Secrets/Env: - `${{ secrets.YOUR_SECRET }}` GitHub Actions syntax throughout - `.env.example` + docker-compose.yml with all expected vars - No hardcoded values; all externalized Proving it works: - Built-in fixture tests (`npm test`) for every integration point - `npm run apcher:full-scan` catches CVEs + dep issues pre-ZIP - Watchdog generates synthetic drift tests that run on startup - Idempotency baked in (safe to retry 1K times) Example ZIP includes Stripe test mode keys + Postgres docker fixture.