It used to be somewhat fine to have a production .env in your codebase.
It was already kinda negligent (albeit helpful to run prod one-offs).
Now, it's hyper-dangerous because your agents don't know what envs the tools they call eventually invoke.
Stick with dev credentials.