# Release signing keys must NEVER be committed. Production signing reads the
# key from RELEASE_PRIVATE_KEY / RELEASE_PRIVATE_KEY_FILE at build time only
# (see docs/RELEASE_GUIDE.md) -- it is never expected to live in this tree.
*.pem
*.key
private_key.pem
release_private_key*
*_private_key*

# Build output (tarballs, checksums, signed manifests)
dist/

# Python
__pycache__/
*.pyc
.pytest_cache/