Claude Code pasted my Stripe webhook secret into the PR description
was asking it to document the payment flow for a contractor. somehow the generated PR body included whsec … from my local .env.local . i caught it before merge but github already emailed the whole re…