Git

Git is a content-addressed history of snapshots. Most "scary" situations are recoverable because commits aren't deleted immediately — git reflog is your safety net. Optimize for a history that's easy to read and bisect.

Commit hygiene

• One logical change per commit; keep them small and self-contained (each should build/pass tests).
• Stage intentionally: git add -p to split unrelated changes.
• Write good messages — Conventional Commits: type(scope): summary (feat, fix, docs, refactor, test, chore, perf).
  • Imperative mood, ≤ ~50-char subject, blank line, then why in the body (not just what).
• Never commit secrets, large binaries, build artifacts, or node_modules — that's what .gitignore is for.

feat(auth): add refresh-token rotation

Access tokens now expire in 15m and rotate on refresh to limit
replay if one leaks. Closes #142.