https://dmaisano.dev/posts/excluding-env-secrets-from-github-copilot/