I also use global ignore, but I think the key is to keep secrets out of commands. I store mine in .dev.vars, which Wrangler reads automatically. For production, I use wrangler secret put and enter them myself. I also told Claude to never read that file.

> and teach Claude to not git add .

It already doesn't do this. This is from users committing the `.claude` directory themselves.