diff --git a/.agent/workflows/gitbucket_api.md b/.agent/workflows/gitbucket_api.md
index 7c97633..0ca8018 100644
--- a/.agent/workflows/gitbucket_api.md
+++ b/.agent/workflows/gitbucket_api.md
@@ -10,9 +10,12 @@
 ## Core API Usage
 
 ### Setting Up Authentication
+> [!CAUTION]
+> **NEVER** commit your `GITBUCKET_TOKEN` to the repository. Retrieve it from your secure credentials vault and set it as an environment variable locally.
+
 Set the required environment variable before running scripts or `curl`:
 ```bash
-export GITBUCKET_TOKEN="58ff61c1a0ede2fb4a984f8d5be97d5ae1d8d855"
+export GITBUCKET_TOKEN="<YOUR_TOKEN_FROM_VAULT>"
 ```
 
 ### Preferred Utilities (Python)
diff --git a/.gitignore b/.gitignore
index 01b11ed..7f24cdf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,4 +14,6 @@
 **/config.yaml
 data/audio/*
 data/*
-.env.gitbucket
\ No newline at end of file
+.env.gitbucket
+.env.ai
+**/.env*
\ No newline at end of file