A startup deployed straight from their dev machine. Directory listing, exposed .git, leaked .env — everything is there if you look. Find the flag.