cowork-bot: merge master into improve/envault-20250630; drop stale QA artifacts already removed on master (test-suite green locally, py3.11 CI)

Author: cowork-bot

.github/workflows/release-audit.yml

@@ -22,6 +22,12 @@ Thumbs.db
 # Envault
 .envault-audit.log
 .envault.salt
+.env
+
+# QA/temp run artifacts
+_qa*
+qa_*
+test-file.txt
 .env.dev
 .env.staging
 .env.prod

.gitignore

@@ -33,7 +33,7 @@
 from envault.stores import LocalEnvStore, SecretStore, get_store
 
 # Environment variable for API authentication key
-API_KEY_ENV_VAR = "ENVAULT_API_KEY"
+API_KEY_ENV_VAR = "ENVAULT_API_KEY"  # pragma: allowlist secret
 
 _OAUTH2_CACHE_TTL: float = 300.0  # seconds
 _oauth2_cache: dict[str, tuple[bool, float]] = {}