Use a placeholder password in the docs; ignore *.pem and *.key

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013GAeg4Jo6xjZzjwy9QDWMQ

.gitignore

@@ -16,6 +16,10 @@ __pycache__/
 # The local flow store (its own git repository) and the encrypted secrets file.
 /backend/flow-data/
 
+# Keys, wherever a data directory lands: the engine writes oauth-key.pem into it.
+*.pem
+*.key
+
 # Output of `make verify` (root Makefile).
 /frontend/screenshots/
 *.tsbuildinfo

docs/code/cli.md

@@ -110,7 +110,7 @@ restart. It is skipped if the instance is already enrolled.
 
 ```text
 Created the admin account admin@example.com
-  password: k3Qm-8vTpLdX
+  password: example-password
   Shown once. Change it from the dashboard.
 Fluksio 0.1.0 — data in /home/you/.fluksio
   API      http://127.0.0.1:8000/api/v1

docs/getting-started/data-science.md

@@ -19,7 +19,7 @@ open, and no login. The first run prints something like:
 
 ```text
 Created the admin account admin@example.com
-  password: k3Qm-8vTpLdX
+  password: example-password
   Shown once. Change it from the dashboard.
 Fluksio 0.1.0 — data in /home/you/my-research/.fluksio
   API      http://127.0.0.1:8000/api/v1
@@ -690,7 +690,7 @@ API = "http://127.0.0.1:8000/api/v1"
 api = httpx.Client(base_url=API, timeout=60)
 token = api.post(
     "/login/access-token",
-    data={"username": "admin@example.com", "password": "k3Qm-8vTpLdX"},
+    data={"username": "admin@example.com", "password": "example-password"},
 ).json()["access_token"]
 api.headers["Authorization"] = f"Bearer {token}"