# Copy to .dev.vars for local development (`npm run dev`) if you want to exercise # POST /admin/rollup — without it that route 404s, which is also how a deploy that # never ran `wrangler secret put ADMIN_TOKEN` behaves. # The real token lives only in the deployed secret; nothing here is ever committed. ADMIN_TOKEN="dev_admin_token_placeholder"