Setting up a self-hosted Gitea server on Synology via Docker went smoothly. Then I discovered I had pushed my API keys straight into it, hidden inside my Claude Code conversation logs.