Good call; just applied this myself. What other files do you lock down?

    .gitconfig
    .claude/settings.json (same for codex)
    .zprofile and .zshrc
    .ssh/config and id_ed25519*