pub fn is_sensitive_file(name: &str) -> bool
Returns true if name matches any entry in [SENSITIVE_FILES] or starts with .env. (catches all dotenv variants).
true
name
SENSITIVE_FILES
.env.