- .editorconfig: standard fleet template (utf-8, lf, 4sp, final newline,
trim trailing ws, 2sp for yml/yaml/toml/json, tab for Makefile)
- .gitignore: add *.crt to secrets block; add warmed_cookies/ (no leading
dot) alongside .warmed_cookies/ for compatibility with cookie warmer
code paths that write to either location
Pre-commit hooks already match the requested set (ruff lint+format,
mypy --strict, gitleaks, bandit -r -x tests/,.venv,__pycache__,
trailing-whitespace/end-of-file-fixer/check-yaml/check-json/check-merge-conflict).
