Secrets in .env and code on GitHub

Prepping the bot for its server move: secrets go into a .env file, code goes to GitHub — with tokens kept OUT of the repository. We walk through the 'token in a public repo' story, the 'but it's my repository' myth and the 'before your first push' checklist — the entry ticket to deployment.