Haitao Pan 7fa9018d53 security(docs): remove plaintext review credentials, inject from .env ... The svc.plus review password and the two bridge tokens were committed in plaintext across the manual case / API test docs. Replace every value with a `.env` / secret-store reference and add a tracked .env.example template. Harden .gitignore (.env.*, *.local.env, secrets.env) while keeping !.env.example. Note: git history was rewritten separately to purge the leaked values; the credentials must be rotated regardless. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-29 10:57:31 +08:00
..
api-script-runbook.md	security(docs): remove plaintext review credentials, inject from .env	2026-06-29 10:57:31 +08:00
app-external-service-api-test-matrix.md	security(docs): remove plaintext review credentials, inject from .env	2026-06-29 10:57:31 +08:00
bridge-sync-contract-chain.md	Refine account sync bridge state model	2026-04-19 19:42:00 +08:00
core-integration-auto-test-plan.md	Remove managed local bridge mode	2026-04-12 22:09:20 +08:00
flutter-go-layered-testing-template.md	test: add layered Flutter+Go testing template and CI workflows	2026-04-08 13:11:53 +08:00
test-case-coverage-matrix.md	docs: add external service api test matrix	2026-04-22 09:35:05 +08:00
xworkmate-test-spec.md	docs: consolidate core integration cases	2026-04-05 18:24:10 +08:00