Even if you forbid .env, Python can still read it

API keys. Suppose you wrote this one line in your Claude Code configuration file.{ "permissions": { "deny": ...