Never upload .env, and ignore it in Git by default #1568

.env becomes the place for local values, including secrets. Today a .env file is uploaded as Actor source unless .gitignore or .actorignore lists it, and anything under .actor/ is always uploaded. This has to land before apify run starts reading .env.

Scope

• Add .env and .env.* to the hard-coded push excludes in getActorLocalFilePaths (src/lib/utils.ts), also under .actor/. Keep .env.example uploadable.
• Add .env to GITIGNORE_REQUIRED_CONTENTS, so apify init and apify create put it in .gitignore.

Done when

• A .env that isn't git-ignored doesn't appear in the pushed source, in the Actor root or under .actor/. Tests cover both.
• Projects made by apify init and apify create have .env in .gitignore.