- Prevent .env files from being committed (secrets from KMS only) - Add compose.full.yml and compose.ghcr.yml for local development