Remove tracked .DS_Store, add .dockerignore, and ignore app-specific env file.
The note is not visible to the blocked user.