removed ".env" references from comments, documentation

controller/README.md

@@ -123,7 +123,7 @@ The app catalog lives in a separate Git repository. The controller:
 - Shallow-clones the catalog on startup
 - Periodically fetches updates (configurable, default 15 min)
 - Copies only `docker-compose.yml` and `.felhom.yml` to the stacks directory
-- **Never overwrites** `app.yaml` or `.env` (user secrets are safe)
+- **Never overwrites** `app.yaml` (user secrets are safe)
 - Uses SHA-256 content hashing — only writes files that actually changed
 - Triggers stack rescan after sync so the dashboard updates immediately
 - **Post-sync hook**: auto-injects missing deploy fields (new secrets, domains) into existing `app.yaml` for stacks whose templates were updated (see Missing Field Injection below)
@@ -742,7 +742,7 @@ The controller needs write access to its own `docker-compose.yml`. This is achie
 
 ```yaml
 volumes:
-  # 1. Directory mount — gives access to compose file + .env
+  # 1. Directory mount — gives access to compose file + config
   - /opt/docker/felhom-controller:/opt/docker/felhom-controller
   # 2. Read-only override — prevents accidental config writes
   - /opt/docker/felhom-controller/controller.yaml:/opt/docker/felhom-controller/controller.yaml:ro

controller/internal/sync/sync.go

@@ -301,7 +301,7 @@ func (s *Syncer) buildRepoURL() string {
 }
 
 // copyTemplates copies docker-compose.yml and .felhom.yml from the catalog cache
-// to the stacks directory. Never overwrites app.yaml or .env files.
+// to the stacks directory. Never overwrites app.yaml.
 func (s *Syncer) copyTemplates() (newApps []string, updated []string, err error) {
 	templatesDir := filepath.Join(s.cacheDir, "templates")
 	entries, err := os.ReadDir(templatesDir)
@@ -327,7 +327,7 @@ func (s *Syncer) copyTemplates() (newApps []string, updated []string, err error)
 			}
 		}
 
-		// Files to sync (only template files, never app.yaml or .env)
+		// Files to sync (only template files, never app.yaml)
 		syncFiles := []string{"docker-compose.yml", ".felhom.yml"}
 		anyChanged := false