Source is a business asset
Keep a clear repository, dependency manifest, scoped environments, release history and reviewable changes. Protected credentials never belong in Git. Define who may merge or deploy and how to restore a previous working release.
